Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8281561 Disable http DIGEST mechanism with MD5 and SHA-1 by default
  3. JDK-8288070

Release Note: MD5 and SHA-1 Are Disabled by Default for HTTP Digest Authentication

XMLWordPrintable

      The MD5 and SHA-1 message digest algorithms have been disabled by default for HTTP Digest authentication. MD5 and SHA-1 are considered insecure and are deprecated generally. Accordingly, they have both been disabled by default for some usages of HTTP Digest authentication with java.net.HttpURLConnection. They can re-enabled on an opt-in basis by setting a new system property. More information can be found in [Networking Properties](https://docs.oracle.com/en/java/javase/19/docs/api/java.base/java/net/doc-files/net-properties.html).

            michaelm Michael McMahon
            michaelm Michael McMahon
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: