Simon Josefsson wrote: > I think our choice should be between HMAC-SHA-1 and HMAC-SHA-256. I'll ignore it then.