Clarify comment

paulmillr · Dec 15, 2022 · eed88bf · eed88bf
1 parent ad91f35
commit eed88bf
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/src/sha1.ts b/src/sha1.ts
@@ -1,8 +1,8 @@
 import { SHA2 } from './_sha2.js';
 import { wrapConstructor } from './utils.js';
 
-// SHA1 was cryptographically broken, however, it was not broken for cases like HMAC.
-// Don't use it for a new protocol.
+// SHA1 was cryptographically broken.
+// It is still widely used in legacy apps. Don't use it for a new protocol.
 
 // RFC 3174
 const rotl = (word: number, shift: number) => (word << shift) | ((word >>> (32 - shift)) >>> 0);