The sender’s unique information should be used in a signature; It should be easy to create a signature; It should be impossible to falsify a signature computationally; A signature should be small.
If you thought MD5 was banished from HTTPS encryption, you’d be wrong. It turns out the fatally weak cryptographic hash function, along with its only slightly stronger SHA1 cousin, are still widely ...