Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:117740
Return-Path: <devnexen@gmail.com>
Delivered-To: mailing list internals@lists.php.net
Received: (qmail 20786 invoked from network); 17 May 2022 18:56:01 -0000
Received: from unknown (HELO php-smtp4.php.net) (45.112.84.5)
  by pb1.pair.com with SMTP; 17 May 2022 18:56:01 -0000
Received: from php-smtp4.php.net (localhost [127.0.0.1])
	by php-smtp4.php.net (Postfix) with ESMTP id 939101804A9
	for <internals@lists.php.net>; Tue, 17 May 2022 13:36:35 -0700 (PDT)
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on php-smtp4.php.net
X-Spam-Level: 
X-Spam-Status: No, score=0.6 required=5.0 tests=BAYES_50,DKIM_SIGNED,
	DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FREEMAIL_FROM,
	RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H2,SPF_HELO_NONE,SPF_PASS,
	T_SCC_BODY_TEXT_LINE autolearn=no autolearn_force=no version=3.4.2
X-Spam-ASN: AS15169 209.85.128.0/17
X-Spam-Virus: No
X-Envelope-From: <devnexen@gmail.com>
Received: from mail-oi1-f175.google.com (mail-oi1-f175.google.com [209.85.167.175])
	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
	 key-exchange ECDHE (P-256) server-signature RSA-PSS (2048 bits) server-digest SHA256)
	(No client certificate requested)
	by php-smtp4.php.net (Postfix) with ESMTPS
	for <internals@lists.php.net>; Tue, 17 May 2022 13:36:31 -0700 (PDT)
Received: by mail-oi1-f175.google.com with SMTP id y63so247683oia.7
        for <internals@lists.php.net>; Tue, 17 May 2022 13:36:31 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20210112;
        h=mime-version:from:date:message-id:subject:to;
        bh=IuChH45BJiyrnBvuV8vRXpDV6LbGakbBq0ZOJEvOnlo=;
        b=SJZkdRMkUn47kk31lULmREV7ExlBfhyMvE2cKOqI21k+J48nUlQHh9lzf/1w24YyfT
         bnMRLYz+JSkgC5ftd8obD3aQUhl2fb3QYIeKPMrN20CKyWSr+G+zEtsZscfawlu52wDe
         LLCJUiT9DUkP7xgRWmNVbRrox5wJm1oXyTwF+HN1EPt6IvC53GS8o1K3sv0v5bVWklIR
         tDyzrn/MMBlNI6ux6Yy8whAZQbLH+tLsn6I5nudWKyzU5DI1fAYk48lptwu4Edg+D86b
         iBQ6o+ZPwepVJCmeuNSkmIYMZ/EVpVU9CRyvw2MVZ3tLTmaeqLwbJkVFGdVHU4elbW7r
         PyKA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20210112;
        h=x-gm-message-state:mime-version:from:date:message-id:subject:to;
        bh=IuChH45BJiyrnBvuV8vRXpDV6LbGakbBq0ZOJEvOnlo=;
        b=1y4jC8HpyCNSqSFtpeMi7Vm+xHNEhKw+avlgP3ZZOXoFM95cpNcYYzkxzULPkT9gis
         dYiXNsXl0AMOgVXqY0XE1sraq4yq0qM9PJE9vFWE/7hu81aBCZoEwtcAFsQ3ROYBGEI1
         Hxvb3JuqI/75+I1RFtSodOplf1iGRRsO9CGfl+QXcvbG5ZmeRCt3ejPqkeB4bNoN1Mb2
         ClacSk42QpZ2N+vxLTuX5BUkraGkzLY5ubDomVN9qGPt4EJbYVulHqDkOOtfjjM/V/Jz
         OugMLJ/1/rKezLCb4x3ZyNW5EK2Wn70Gcv9q0zfZkGATijcQ0CoeT/UQAQn9z/IY83Ya
         l4vQ==
X-Gm-Message-State: AOAM530OjUtFA/RQfj0YzrFNtxWIE3UwDxg5/IMoTRuinufYaewPr0gx
	KlK4n+CFjjYS1Yy8RfX/q8pi6ESBxbrdVaooL2TRfCih1Tc=
X-Google-Smtp-Source: ABdhPJxoluih+kaNRYDNU0nRtizEy8I6U5lhZH/Eu976beNMLb5aCvqjEi9tVIjS/H75mjqOQO7s6cejKAi++nvwMrc=
X-Received: by 2002:aca:3dc2:0:b0:326:ad73:b5ce with SMTP id
 k185-20020aca3dc2000000b00326ad73b5cemr17395528oia.280.1652819791169; Tue, 17
 May 2022 13:36:31 -0700 (PDT)
MIME-Version: 1.0
Date: Tue, 17 May 2022 21:36:20 +0100
Message-ID: <CA+XhMqw0YmvwXh_pyQgFZcWC1kO7yBrF5pkAhSzB_eHbABFnUw@mail.gmail.com>
To: internals@lists.php.net
Content-Type: text/plain; charset="UTF-8"
Subject: Early feedback on encrypted session PR
From: devnexen@gmail.com (David CARLIER)

Hi,

I wanted a more general but early feedback on the idea itself
https://github.com/php/php-src/pull/3759

which is encrypting/decrypting the session on the fly with openssl
(assuming as an improvement it would need a more complex key than the
session id to make it more useful and being configurable).

Regards.