@graiz From my understanding, SHA1 is still being used because of the device limitations and capabilities.

All of the current and new encryptions used with the current and older firmware and different protocols and transports rely on some way or another on MD5, SHA1, or SHA256 hashing for exchanging the credentials, there are other components that are involved to then verify and confirm identities and actually authenticate the connection when credentials are involved. Otherwise it's just an open connection on the correct port.

All of this communication happens locally, their cloud communication is a different thing all together and I don't have specifics on that.

I'm not an expert, I do this in my spare time, I also could be completely wrong in a lot of this.

Whether it's more or less secure, I do not have an answer for you.