Comment 6 for bug 316438

... that said, does the string hold any cryptographic significance? It's not as if we care what it is a hash of? The server doesn't know what the data hashed is?

If so, I'll switch to MD5. xmds still needs to enforce string length tho.