7. IANA Considerations
7.1. HTTP Field Name Registration
IANA has updated the "Hypertext Transfer Protocol (HTTP) Field Name Registry" [HTTP] as shown in the table below:
| Field Name | Status | Reference |
|---|---|---|
| Content-Digest | permanent | Section 2 of RFC 9530 |
| Repr-Digest | permanent | Section 3 of RFC 9530 |
| Want-Content-Digest | permanent | Section 4 of RFC 9530 |
| Want-Repr-Digest | permanent | Section 4 of RFC 9530 |
| Digest | obsoleted | RFC3230, Section 1.3 of RFC 9530 |
| Want-Digest | obsoleted | RFC3230, Section 1.3 of RFC 9530 |
Table 1: Hypertext Transfer Protocol (HTTP) Field Name Registry Update
7.2. Creation of the Hash Algorithms for HTTP Digest Fields Registry
IANA has created the new "Hash Algorithms for HTTP Digest Fields" registry at https://www.iana.org/assignments/http-digest-hash-alg/ and populated it with the entries in Table 2. The procedure for new registrations is provided in Section 5.
| Algorithm Key | Status | Description | Reference |
|---|---|---|---|
| sha-512 | Active | The SHA-512 algorithm. | RFC6234, RFC4648, RFC 9530 |
| sha-256 | Active | The SHA-256 algorithm. | RFC6234, RFC4648, RFC 9530 |
| md5 | Deprecated | The MD5 algorithm. It is vulnerable to collision attacks; see NO-MD5 and CMU-836068 | RFC1321, RFC4648, RFC 9530 |
| sha | Deprecated | The SHA-1 algorithm. It is vulnerable to collision attacks; see NO-SHA and IACR-2020-014 | RFC3174, RFC4648, RFC6234, RFC 9530 |
| unixsum | Deprecated | The algorithm used by the UNIX "sum" command. | RFC4648, RFC6234, UNIX, RFC 9530 |
| unixcksum | Deprecated | The algorithm used by the UNIX "cksum" command. | RFC4648, RFC6234, UNIX, RFC 9530 |
| adler | Deprecated | The ADLER32 algorithm. | RFC1950, RFC 9530 |
| crc32c | Deprecated | The CRC32c algorithm. | Appendix A of RFC9260, RFC 9530 |
Table 2: Initial Hash Algorithms
7.3. Deprecate the Hypertext Transfer Protocol (HTTP) Digest Algorithm Values Registry
IANA has deprecated the "Hypertext Transfer Protocol (HTTP) Digest Algorithm Values" registry at https://www.iana.org/assignments/http-dig-alg/ and replaced the note on that registry with the following text:
This registry is deprecated since it lists the algorithms that can be used with the Digest and Want-Digest fields defined in RFC3230, which has been obsoleted by RFC 9530. While registration is not closed, new registrations are encouraged to use the Hash Algorithms for HTTP Digest Fields (https://www.iana.org/assignments/http-digest-hash-alg/) registry instead.