RFR: 8281561: Disable http DIGEST mechanism with MD5 by default

[Michael McMahon]

On Fri, 4 Mar 2022 11:25:38 GMT, Daniel Fuchs <dfuchs at openjdk.org> wrote:

> Should we instead have a property to disable algorithms, whose default value would contain "MD5" by default?

I considered that and implemented it that way at the start, but what you would end up with then is users running their code with something like: -DdisabledAlgNames="" 

I find that style leads to a much less explicit "opting in" than by making the user explicitly identify the deprecated algorithm by name.

-------------

PR: https://git.openjdk.java.net/jdk/pull/7688