Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:107203
Return-Path: <cmbecker69@gmx.de>
Delivered-To: mailing list internals@lists.php.net
Received: (qmail 71489 invoked from network); 18 Sep 2019 15:55:21 -0000
Received: from unknown (HELO php-smtp3.php.net) (208.43.231.12)
  by pb1.pair.com with SMTP; 18 Sep 2019 15:55:21 -0000
Received: from php-smtp3.php.net (localhost [127.0.0.1])
	by php-smtp3.php.net (Postfix) with ESMTP id 27FD02D1FB3;
	Wed, 18 Sep 2019 06:32:45 -0700 (PDT)
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on php-smtp3.php.net
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,DKIM_SIGNED,
	DKIM_VALID,FREEMAIL_FROM,RCVD_IN_DNSWL_NONE,SPF_HELO_NONE,
	URIBL_BLOCKED autolearn=no autolearn_force=no version=3.4.2
X-Spam-ASN: AS8560 212.227.0.0/16
X-Spam-Virus: No
Received: from mout.gmx.net (mout.gmx.net [212.227.15.19])
	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by php-smtp3.php.net (Postfix) with ESMTPS;
	Wed, 18 Sep 2019 06:32:44 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=gmx.net;
	s=badeba3b8450; t=1568813557;
	bh=DCFzxMF9M+CO+T4dtjxWsbPolwTBnDmIDyiKGp8AaXI=;
	h=X-UI-Sender-Class:Subject:To:References:From:Date:In-Reply-To;
	b=MVxPwhFbRRUydp11JPDZQbfsEcYzPSiUr0mxmZ5F6hV79ErtZESdVhoNMLKsORZNv
	 kN9TT2larCgW+xOviA6gFyKMTbiE5V694o+/KlBgjsp+4fmrp+d3r7Vr2MkY/c9ti1
	 7JHh47wNMMqEQTYSKhXMJB6JZH5x6U569Y6+uudI=
X-UI-Sender-Class: 01bb95c1-4bf8-414a-932a-4f6e2808ef9c
Received: from [192.168.2.144] ([84.179.236.50]) by mail.gmx.com (mrgmx004
 [212.227.17.190]) with ESMTPSA (Nemesis) id 1MUowV-1ibHr239Dl-00QkOO; Wed, 18
 Sep 2019 15:32:37 +0200
To: =?UTF-8?Q?Johannes_Schl=c3=bcter?= <johannes@schlueters.de>,
 Arnold Daniels <arnold.adaniels.nl@gmail.com>, internals@lists.php.net,
 Anatoliy Belsky <ab@php.net>
References: <CA+kxMuTvOjnV18LwVP=n_JXwm66932uGV-m9zRSsFgiX9Jcy7g@mail.gmail.com>
 <61ab41b2e7eb74c23bc0dc4a307d1045863966fc.camel@schlueters.de>
 <c-17aa9-k0m5eq5v-y7zw3a=hth64h@2.gethop.com>
 <51d2093d-7ad5-c50e-0a33-1b088b891223@gmx.de>
 <b2b491716325b0728080073b66ce41a392094ee0.camel@schlueters.de>
Message-ID: <e5e08d80-6684-fc26-01a7-8f07ee5933ce@gmx.de>
Date: Wed, 18 Sep 2019 15:32:38 +0200
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:60.0) Gecko/20100101
 Thunderbird/60.9.0
MIME-Version: 1.0
In-Reply-To: <b2b491716325b0728080073b66ce41a392094ee0.camel@schlueters.de>
Content-Type: text/plain; charset=utf-8
Content-Language: de-DE
Content-Transfer-Encoding: quoted-printable
X-Provags-ID: V03:K1:IBqFod9XJJhjDTUq2ItYaq779tm2ysJN3+uK7tEv29UzxrQoSVo
 tousm8y3PrssfQJesphPc1fHYWKaTfVsoStKf1yMJqVukKMr1lhhiqh7haVFyK6M1h3mD0Z
 fPT6BiQtNlvyIh8viQwE5QAvU3MgbkLXKnzkGMYIAcFek2NCQiDQ43LxyjmUSpKD8tbXVZX
 25x+li7tblUbXycdc8OqQ==
X-UI-Out-Filterresults: notjunk:1;V03:K0:VRmvZ9hg0z0=:6gDC+wi4fnzbBR0LlaTvqs
 EVclQ2uWBKCNPCowH4BxqXO9OWSdNQZkmPdts3Q766qafe13EjnwliRPHEUkx+SI9i4VY2QyK
 Q5MpBChzRbmUoZnyRkPRsygLFfWkN5OXSLFV70JoeD8jMYrXuI8+tpYmT2bOeqbMnQnZOih1D
 6L6bhRxAgZ/vnO7s1wneLZZTrglpJMLqs88ZhXIdAkfrG620KJsI7ZQq2uCbKf6N4LEsp2mlz
 P7T0QvZZkj6J80hM9WcyWZKUGdSiSRoZICytJewMy9rMwIyWh+jSbevegyjKmlojntldH8Dt1
 uSYi0LajL6AqQ9Tsl+fWee5nK6AEvo1zp45FUxB7YLc0hl8fvpMK7ApVn9uZvOSRwkUueTfBh
 dTIfZjoNA25XL8rdpX3SqNCwb4n9au2YYCrsCwXFrgH9dU0y/qWsKwXmWrFEDYFCjLH/AR2en
 POoNb3piu3wlAJY+B9WGvCdntjjMVWKHtqhmkIDLkwVfgWyaQvD0lAXe1JnvChs4i7Q7tSifN
 cpnLqgPnsjM8faajlGAdo3H81fYeFWXAxCsd/XS0RcFBEFTX6yVgEOt1G0bzj8OqJiATicfDC
 4yXfusFUnB/4+aqagQBJ7kpN+0QK0KLrMumrqzERsKV83hbRd1H/h0OU0MQ/AwOY+ZTGZ1Soy
 84sDgd11PxP1+dABhlAl5SUHKeAjpj9BMEQWOQGArZqNUZSv3aKy4RZJMySJ9Yx7OEXC16EFl
 QgdQF+L6o6V1s1xX20AWl2j8decFCav7yGTz9HdciS/A28Tmzl12phIihISiSr5nF3C6QGB2x
 1tk6np2ENtGB6LJMwSETl3XkmFy0inHbQYFQ0bn6AbflcyL7JlNjDlNi8v3LZK3EmPSjPf118
 IyUhzyQdOai5ibwltZp3/sTWP4rJXi1P6qoWLAmNJDatPgizlopXnPVl88WE8kff29vkwqFpI
 aUBmR3gk0zkh4+2u/zzI5sYX46OXnUH+mlDUSpZAc0oCTwlcjJfVeNfUnTiIimUU9JMRrwn/+
 HJtOAsQM4IFa7IDu/vGWr8lyTqBFOwYVXh3IzaTwWCNeRmoYAnxBXqqwO3cEDsRKmkUbfbEae
 diSMrqddj9qVS92wSRC+Mdm8qO//ZnX+nZhRRTr+5Duxf1GeGd8KF45SxPpLsJrtLLefiXt8U
 a0wpiIbJJtyTEA1Cf49qIEQsaLasMY+kJ0n+33DV/VxXdcq9nTihx1CNcIrR1HmNNcakdVI8p
 74+UCMy3nhBQYdgBLOAV/r5QJ/G5ak/mtb1WJwZRqGtf/QSaymvn/YklKxMY=
X-Envelope-From: <cmbecker69@gmx.de>
Subject: Re: [PHP-DEV] Changing PECL signup flow.
From: cmbecker69@gmx.de ("Christoph M. Becker")

On 18.09.2019 at 15:22, Johannes Schl=C3=BCter wrote:

> The Windows builds are also a relevant factor in the discussions
> regarding the PECL site. Afaik (Anatoliy and others know better than
> me) packages uploaded to the pecl site are being built in the same
> setup as our official PHP runtime Windows builds.

The PECL builds are done on another VM than the Windows builds.

> Not sure how well
> that image is protected against bad actors doing nasty stuff in their
> build scripts. Thus some oversight about who can push code up there
> might be good.

Indeed, something to consider.  The build code is publicly available,
btw.: <http://git.php.net/?p=3Dweb/rmtools.git;a=3Dsummary>.

=2D-
Christoph M. Becker