Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:103255 Return-Path: Delivered-To: mailing list internals@lists.php.net Received: (qmail 81735 invoked from network); 25 Sep 2018 16:00:37 -0000 Received: from unknown (HELO mail-it1-f182.google.com) (209.85.166.182) by pb1.pair.com with SMTP; 25 Sep 2018 16:00:37 -0000 Received: by mail-it1-f182.google.com with SMTP id q70-v6so6434674itb.3 for ; Tue, 25 Sep 2018 05:08:29 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=N2s0XjrKDiFbJlz1rqqdBNCCakvjePQj9jN2vDsIQM0=; b=aeu7VbD1+hOlZgA683Pcmj/MX5kvNe4nBO7L66eNGSl+wMNOVC/5yGVI24aOycxfOp vRldKIJUNrdPZXNmf8YShK3WwD+oipQbtCiIV/KEaDtMVG/eJIKB2z8HpwVUz6snVowK wB12YdxfrpchDXMLRg9UxJkc4i+x+9VHzT5Lmp5YwTJQnBVjMHNI0ZrlKlg3LHTjph9u JjMzWR8+uH0MPbE6iCQQAaRg0ECaKwvEy4CqZAbzwfqIPJ/xYROarpeuvkwX6Gj6/9Gd vGkUMBO8N2j5yf7NERCiecWeoPCGEmEsuBgjq0mhDpsI4QtGO2K9mSP8s3/X81YRvJoA +jSg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=N2s0XjrKDiFbJlz1rqqdBNCCakvjePQj9jN2vDsIQM0=; b=Yx95om8d8oSWOaC9fYpWBRsb3vZK2urKqMlySusdYEkxSEl6I1gCLPGl2P1cOL+a9v x1XniCtKLqH5vYvf5is4jGRPbzt8tM0JvOemlXjTbf5ihIGwJse3QUi3ZbR3h8HtzxZn pA4AlXPyc3KTv3id8EHs/ap3ajCz5ghl6PQS0NDotm4rWIRd31Ob/GnWZoLdjKb1MEjj 4khCo31LCokV+a6pBRlhj0Pn0eNfOmzq/9rvn6hJ2RGbdiYZftlt0jBK6jUvxabkl4+F mv1rG+OB+IP0KzlbFnuE29BMpe/rLcHzhs6q5RKJxj9hl8CVSJKzrv/Nsms0m4VSI4bz rgKg== X-Gm-Message-State: ABuFfoiFRbGuaS0AY3yxG6jrBuOxt99rPOY2awut4YVtI4IECcOIlXnm gneI0Z8XuN4EMe64NXSXeockiZRcoOaF/Vx80cQ= X-Google-Smtp-Source: ACcGV61SlsEfoVgPT1CPr6W5reCkTX/dmB4kNkQ1RSocNkEksOmqcEe34VgLzfv9dsRFaC6MXio+EfttbqDQse38yGM= X-Received: by 2002:a24:c48a:: with SMTP id v132-v6mr409425itf.72.1537877308803; Tue, 25 Sep 2018 05:08:28 -0700 (PDT) MIME-Version: 1.0 References: <5518056b-150f-517c-2c24-09d5da4414f0@gmx.de> <3a3a59bf-98a3-764d-def2-e514f506edfc@gmail.com> <2e82ff1a-7045-3b7e-3feb-bfdac29883e9@gmx.de> <2f30a0da-c15a-8723-bebd-4143d49cf032@gmail.com> <7fbac401-d15f-e7fe-2792-41f5c8cea411@gmail.com> In-Reply-To: Date: Tue, 25 Sep 2018 14:08:16 +0200 Message-ID: To: Stanislav Malyshev Cc: Christoph Becker , PHP internals Content-Type: multipart/alternative; boundary="000000000000b314020576b0f6a6" Subject: Re: [PHP-DEV] [RFC} Deprecate and Remove ext/wddx From: nikita.ppv@gmail.com (Nikita Popov) --000000000000b314020576b0f6a6 Content-Type: text/plain; charset="UTF-8" On Thu, Sep 20, 2018 at 7:02 PM Stanislav Malyshev wrote: > Hi! > > > We have deprecated and moved to PECL a number of extensions in the > > recent past. These were mysql and ereg in PHP 7.0 and mcrypt in PHP 7.2. > > I have always understood these moves as "sunsetting" the extensions, in > > the sense of strongly discouraging their continued use, as well as > > removing any promise of further maintenance. The move to PECL rather > > than outright deletion of the code is just a matter of general policy > > (or so I thought). > > I think we should distinguish between the two cases - not having > extension in core and deprecating the extension. Unless we declare that > the only function of PECL now is to serve as a graveyard for archival of > deprecated code. I don't think we really want to do that? If yes, than > we should distinguish between deprecating the extension and just moving > it to PECL. > Sure, generally speaking we can also move an extension to PECL without deprecation -- for example if it does not appear to be commonly used anymore and we do not want to maintain it in php-src, but otherwise nothing is wrong with the extension and its use. However, this is not the case for the last three moves to PECL we did. In those cases we always wanted to explicitly discourage further use of the extension. The same is true for ext/wddx. It's not just a matter of nobody using WDDX in 2018, we also have specific security concerns which make continued use of this extension dangerous. If your code breaks because we dropped ext/wddx, you should not be able to type "pecl install wddx" and go back to ignoring the issue. By the way, I'm fine with moving the extension to PECL already in PHP 7.4, the part that's important to me is that it's going to generate some form of diagnostics once in PECL. Nikita --000000000000b314020576b0f6a6--