Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:100320
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: softfail (pb1.pair.com: domain golemon.com does not designate 74.125.82.48 as permitted sender)
MIME-Version: 1.0
Sender: php@golemon.com
In-Reply-To: <9422cefb-4dda-9a1d-8856-46ad587f6f60@genkgo.nl>
References: <a4189866-23ea-4dc5-12a4-a7fbad8e5601@genkgo.nl>
 <CA+kxMuToz+RZ4_t_ta7CRzBu98Ts3U5=cTV--SppGKK85STUEA@mail.gmail.com>
 <CAESVnVpJ0oy+afKhfhKv1trJtnOLmcWFg=DA1G-TpMxfW3jDqw@mail.gmail.com>
 <ffbba599-83ee-07c1-3b68-42bcd9a90009@genkgo.nl> <E7AAE43A-CF2D-45E8-A176-9EAFFFEB93C1@strojny.net>
 <CAESVnVrN-M7uDzB6LqXvL8kDxaOarWKmNKdz8nGYG7v1dOQ_BQ@mail.gmail.com>
 <CAPhkiZxKj6qmHreyO+uHFFomKA9Ta5r9ypnFfEUZaQ0A+tGCJw@mail.gmail.com>
 <cc7d025d-8d9c-1cb3-6c8c-75487992edc5@genkgo.nl> <CAPhkiZzm2-G5EoewGQy9yd=2A2DLfgp3-XQ9fbPPwBLBzUB=AQ@mail.gmail.com>
 <9422cefb-4dda-9a1d-8856-46ad587f6f60@genkgo.nl>
Date: Mon, 28 Aug 2017 12:20:09 -0400
Message-ID: <CAESVnVqNbofc=vegqWaKK0cAU25VQ6DR7OCM99vT3JCK8bAQyQ@mail.gmail.com>
To: "Frederik Bosch | Genkgo" <f.bosch@genkgo.nl>
Cc: Andrey Andreev <narf@devilix.net>, Lars Strojny <lars@strojny.net>, 
	Dan Ackroyd <danack@basereality.com>, 
	"internals@lists.php.net" <internals@lists.php.net>
Content-Type: multipart/alternative; boundary="001a11468e0a3d89430557d2ab0c"
Subject: Re: [PHP-DEV] [VOTE] Same Site Cookie RFC
From: pollita@php.net (Sara Golemon)

--001a11468e0a3d89430557d2ab0c
Content-Type: text/plain; charset="UTF-8"

On Mon, Aug 28, 2017 at 12:10 PM, Frederik Bosch | Genkgo <f.bosch@genkgo.nl
> wrote:

> Little misunderstanding then. I agree we can better have this PHP 7.3 and
> take some time for it. Current votes also suggest that we should go for the
> array argument implementation. Since there is only a PR for the extra
> argument implementation, it will also take time to have the PR for the
> array argument implementation ready. Taken that into account, we should not
> want this in 7.2.
>
Indeed, yes. Assuming the votes continue on this sharp lean towards the
array option, we should just forget all notions of trying to sneak this
into 7.2.

Direct calls in 7.2 and earlier can easily fall back on calling
header('Set-Cookie: ...'); manually, while sessions support is slightly
more complex, but still doable from userspace.  I expect if need is deemed
high for this, a drop-in composer package can do 90% of the work
automatically.

-Sara

--001a11468e0a3d89430557d2ab0c--