why do you use only SHA1 HMAC authentification ?

[cmar001 1]

Fri May 13 09:34:05 2016 Control Channel Authentication: tls-auth using INLINE static key file
Fri May 13 09:34:05 2016 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri May 13 09:34:05 2016 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication

[zhang888 1065]

SHA384 is also an option. However SHA1 is totally safe for this application, what you read on the media about possible collisions does not apply here.

[LZ1 662]

Hello !

 

I believe Air once said that if it was SHA1 on its own, then perhaps it's bad. But since it's HMAC SHA1, then it's more secured.