API access URLs should contain the digest type
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Libravatar (obsolete) |
Triaged
|
Wishlist
|
Unassigned |
Bug Description
Christoph Anton Mitterer suggested the following in bug #1160143:
IMHO it could eventually become problematic, that the access URL doesn't contain the digest type, i.e. it's just
http://
and not
http://
or e.g.
http://
or something like that.
Even though it seems unlikely right now, one might in some future distant want to change the hash algo, probably less because of security per se, but rather as MD5/SHA256 might no longer be widespread...
And the size of the hash alone is not enough to tell the type... future ones will also use the "common lengths".