SHA-1 is a hash function that will soon be two generations old. It is no longer considered secure and should only be used for backward compatibility.

learn more… | top users | synonyms

1
vote
1answer
95 views

What is the best way to share a shared secret key over HTTPS to be used for HMAC authentication?

I am writing an application in Java that will be using SHA-1 HMAC message authentication. From what I understand, a connection over HTTPS is considered secure enough to share a secret key in plain ...