(In reply to comment #53)
> Note that Bob and I oppose disabling hashes for non-cryptographic purposes.
Me three. Lots of old things clients may want to deal with still use MD5 hashes, and it's convenient to be able to get all our hashing done by NSS. We could of course reimplement MD5 in the client if we had to, but that seems like a shame when we've got a big crypto library sitting right there next to us.
(In reply to comment #53)
> Note that Bob and I oppose disabling hashes for non-cryptographic purposes.
Me three. Lots of old things clients may want to deal with still use MD5 hashes, and it's convenient to be able to get all our hashing done by NSS. We could of course reimplement MD5 in the client if we had to, but that seems like a shame when we've got a big crypto library sitting right there next to us.