Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:103327
Return-Path: <nicolas.grekas@gmail.com>
Delivered-To: mailing list internals@lists.php.net
Received: (qmail 10230 invoked from network); 18 Oct 2018 17:49:19 -0000
Received: from unknown (HELO mail-ot1-f45.google.com) (209.85.210.45)
  by pb1.pair.com with SMTP; 18 Oct 2018 17:49:19 -0000
Received: by mail-ot1-f45.google.com with SMTP id o14so29867596oth.4
        for <internals@lists.php.net>; Thu, 18 Oct 2018 07:02:58 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20161025;
        h=mime-version:references:in-reply-to:from:date:message-id:subject:to
         :cc;
        bh=F1PC99j11O8bDp4l+sWRolH1UcGqkfZrm4KMsJJ2PuQ=;
        b=eXmGW4bxiM4OOT9ZnBruUBuQmWyRp9IBG0ruZk3tVx624SG4zd+icnlD73U0L71Lxq
         R2QGDoP0NTo/7JluldeNuwjLzSb/q28HdIq1GKrnFtl/nJIk/mSF8F6WEhjkiKnNK1w1
         aNis1G7f/tLH0/oXl+2OJM6VrOzR5TiSIpZ0wAIi/GJPc1wVD3kS8SeLKdaSkL1wLFXi
         GsK1PM+w15Ice+oBb9wBDDmDIrN/xCzkWWgx3WkQ/bI5SnKgGh20zC53uUI/elQ/WwI1
         ArcAPNP/+syFngAdqSqc+IpKoKp4Ch3QFgILhWT+JtcChhb8R9gVHDiyRe/bWlp9vUF0
         uzwQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20161025;
        h=x-gm-message-state:mime-version:references:in-reply-to:from:date
         :message-id:subject:to:cc;
        bh=F1PC99j11O8bDp4l+sWRolH1UcGqkfZrm4KMsJJ2PuQ=;
        b=k1jf4cuBNfUHdttrk5rFdA/Mxab2rkWetK5rwKwR4l4ALF0PxOyyDrNmUo43SPW2ou
         wx5Mn71Uato+/iMCxmf/9UWFdmPx0S5Kwj5iWJkvW17ZQRWDFXHVglHzgKQ7zOBNXfjv
         CzWMRlyoazMiUmv1TVtQM+C16mHX3jep1ehEluDqcS+5QCff7FLBN3hbciRcPTgVLCHF
         aBLsnsFhy53tDVsQgH7DsWJqgmaGFLda3WI4ZgNtHmZrnPDIgSxIrBP28OtI9TopOk+K
         xEPVxerH+TshfhiNTjZSHlMddVsEko4mSAnXL6IX+7stv9BcGjsJIv8s9j9e+p3pnd1+
         KJsA==
X-Gm-Message-State: ABuFfojPq/h49YvS5IioBrJ9/qhemGFvZZeUMm3EG50ZMkaki8iIm+PV
	epcT0kUVmftTyCUZU2DK/ruHzniYoQryVB6gAdCn3o++
X-Google-Smtp-Source: ACcGV6062mWB7In2OYcxPy+k/JmKdCMxJxPTFPz44N/5IR71W4zLQjysoGKZQFzTiZfAcMnfb3/q95jM09q3LPyYOmA=
X-Received: by 2002:a9d:6042:: with SMTP id v2mr6156452otj.42.1539871377446;
 Thu, 18 Oct 2018 07:02:57 -0700 (PDT)
MIME-Version: 1.0
References: <CAESVnVq-oQreEyNDQZPWJ+fxuXs_66WWBTywRii7AFEFjqxBNQ@mail.gmail.com>
In-Reply-To: <CAESVnVq-oQreEyNDQZPWJ+fxuXs_66WWBTywRii7AFEFjqxBNQ@mail.gmail.com>
Date: Thu, 18 Oct 2018 16:02:43 +0200
Message-ID: <CAOWwgpnNgGXnjmb0RtmiZX0oXNQ-bGvPV9QCtKjMvuDrSXByvA@mail.gmail.com>
To: Sara Golemon <pollita@php.net>
Cc: PHP Internals List <internals@lists.php.net>
Content-Type: multipart/alternative; boundary="00000000000073dbb90578813e99"
Subject: Re: [PHP-DEV] Password Digest Registry
From: nicolas.grekas+php@gmail.com (Nicolas Grekas)

--00000000000073dbb90578813e99
Content-Type: text/plain; charset="UTF-8"

>
> Opening https://wiki.php.net/rfc/password_registry for discussion.
>

 Should the registry support password hashing mechanisms defined in script
> code? (I don't think so, but feel free to disagree)
>

Not for disagreeing but for the discussion: allowing userland to provide
algos would allow providing polyfills. This is proven useful already (see
https://github.com/symfony/polyfill/)
Of course, a userland algo should not be allowed to replace an existing
algo.

Nicolas

--00000000000073dbb90578813e99--