[wp-trac] [WordPress Trac] #60638: Gravatar: Upgrade md5 hashing algorithm to sha256

WordPress Trac noreply at wordpress.org
Mon Feb 26 14:21:56 UTC 2024


#60638: Gravatar: Upgrade md5 hashing algorithm to sha256
--------------------------+-----------------------------
 Reporter:  henry.wright  |      Owner:  (none)
     Type:  enhancement   |     Status:  new
 Priority:  normal        |  Milestone:  Awaiting Review
Component:  General       |    Version:
 Severity:  normal        |   Keywords:
  Focuses:                |
--------------------------+-----------------------------
 Gravatar now seems to support the sha256 hashing algorithm.

 Source https://docs.gravatar.com/general/hash/

 Functions such as `get_avatar_data()` use the old md5 hashing algorithm.
 That's still supported by Gravatar but considering the md5 string can be
 reversed, privacy may be impacted in cases where a user's email is
 obtained from the md5 hash.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/60638>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list