IE8 and below can't handle SHA1
webkit xhr sometimes throws on send