Use `sha1` unless the `sha256` is display prominence on the website.