Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:124646
Feedback-ID: id5114917:Fastmail
Date: Sat, 27 Jul 2024 13:36:54 +0100
To: internals@lists.php.net
Subject: Re: [PHP-DEV] [RFC] [VOTE] Deprecations for PHP 8.4
User-Agent: K-9 Mail for Android
In-Reply-To: <3563cf9b-8eab-4c82-b525-a5d2f9a767bb@varteg.nz>
References: <USzt7tZZlO1DmAbSTLhD-bqa23FqZn0zk2aah8Ndxgk9c7RY5PefQ8MjbYPUYAzr2_m4Cf-5AI4PuNBTS84rim_FNS6RaT-cWSv714HEvvU=@gpb.moe> <1a88918e-e808-d778-45e1-53797660e093@php.net> <CAPrKfG5Cw_nU7g7FR+t4C1-YZ8CDsDO_-sRs=yEsHO5kCTZL+A@mail.gmail.com> <c03eb187-bd21-4a4b-9faf-8d0243eaa994@varteg.nz> <aa6bc7aa-28d9-40ca-974f-65075adb6199@rwec.co.uk> <3563cf9b-8eab-4c82-b525-a5d2f9a767bb@varteg.nz>
Message-ID: <38920A4B-790D-48C7-B2F6-C49D3F506232@rwec.co.uk>
Precedence: bulk
MIME-Version: 1.0
Content-Type: text/plain;
 charset=utf-8
Content-Transfer-Encoding: quoted-printable
From: imsop.php@rwec.co.uk ("Rowan Tommins [IMSoP]")



On 27 July 2024 00:58:17 BST, Morgan <weedpacket@varteg=2Enz> wrote:
>
>I'm not talking about the MD5 or SHA1 algorithms or whether they should o=
r shouldn't be used=2E I'm just talking about the functions themselves=2E m=
d5(), md5_file(), sha1(), and sha1_file()=2E They only exist because there =
wasn't the generic hash algorithm extension when they were created=2E

I understand what is being claimed (and you're not the only one claiming i=
t), I'm just not convinced it's true=2E I think they have standalone functi=
ons for the same reason we added str_contains and str_starts_with - because=
 it's convenient to have straightforward functions for common use cases=2E

The hash() function is like a 60-piece set of interchangeable screwdriver =
heads, which only professionals and enthusiasts need; md5() and sha1() are =
like the flat-head and Phillips screwdrivers that everyone has in a drawer =
somewhere=2E

The thing that always surprises me is that PHP *doesn't* have a standalone=
 function for SHA-256, which is the only other I've ever used=2E=20

To continue the analogy, we're missing a Pozidriv screwdriver, so people a=
re misusing the Phillips one=2E The RFC is suggesting that we take away the=
ir flat-head and Phillips screwdrivers, and leave them with the 60-piece se=
t, and no instructions=2E=20

My suggestion is we instead give them a Pozidriv screwdriver, and write so=
me tips on how to use it correctly=2E=20

Regards,
Rowan Tommins
[IMSoP]