The hash algorithm in TLS is *HMAC*-hash. Some uses of MD5 like secret suffix ar...

yuhong on July 15, 2011 | parent | context | favorite | on: Nginx doesn't suck at SSL after all

The hash algorithm in TLS is HMAC-hash. Some uses of MD5 like secret suffix are now insecure (which is why usage of MD5 for certificate signing ended long ago), but HMAC is not one of them.