3 ms·

It shouldn't be more than changing those two lines: https://github.com/mitsuhiko/itsdangerous/blob/59f3bf7877e21af8e5571993edb6834744858583/itsdangerous.py#L10

by ch0wn 14y ago

It shouldn't be more than changing those two lines: https://github.com/mitsuhiko/itsdangerous/blob/59f3bf7877e21af8e5571993edb6834744858583/itsdangerous.py#L107 https://github.com/mitsuhiko/itsdangerous/blob/59f3bf7877e21... And the tests, of course.

Luit 14y ago
My point exactly! Armin (the maker/maintainer of the module) will probably consider doing this somewhere in the future.
- the_mitsuhiko 14y ago
  I just pushed out a release that makes it possible to override the digest in a subclass easier.
  - zokier 14y ago
    While overrideability is good, wouldn't it be better to also be 'secure by default'? I'd imagine that SHA-2 would be more sensible default for most users.