Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:130623 X-Original-To: internals@lists.php.net Delivered-To: internals@lists.php.net Received: from php-smtp4.php.net (php-smtp4.php.net [45.112.84.5]) by lists.php.net (Postfix) with ESMTPS id A566D1A00BC for ; Mon, 13 Apr 2026 11:02:29 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=php.net; s=mail; t=1776078154; bh=NDCmnBzkxKv3QdO2VNW7OpFBLhvnUlttt2jSW4V07No=; h=Date:To:From:Cc:Subject:In-Reply-To:References:From; b=hE6LygCMpwVJyW6J3kOPoMpzxvG1H5xeRycH0rlT7Fn0pUMTEB6BADRI4SGHHmXsm 7SNJnrwtJHXhbpifutXaUmXgjWwoNSn/1P/aI/SVE0HGJm3sFnctm1cPhwBklUh18w FRmPIIXfPVmRvlhNF5n3Wainx6ZLyDs4FDKnnuKukpbMmbv9+3r6LL6jH/nEn6IJ0S JKudrE4owtj7fcyPG1o0Fz/0WmdfmyVqMLICXDq3h+En84FarKI0FmxvNpalRxJ0YG yGYf5n7ggaFDKG7oON5nSgSf2ImLGg8e/RFjv3LZdnuxsaG/ixariHKGiEGTuPxQWb tYsa+m26MQMTg== Received: from php-smtp4.php.net (localhost [127.0.0.1]) by php-smtp4.php.net (Postfix) with ESMTP id 232B11801D7 for ; Mon, 13 Apr 2026 11:02:32 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 4.0.1 (2024-03-25) on php-smtp4.php.net X-Spam-Level: X-Spam-Status: No, score=-0.1 required=5.0 tests=BAYES_50,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,DMARC_PASS,HTML_MESSAGE, RCVD_IN_DNSWL_LOW,SPF_HELO_PASS,SPF_PASS autolearn=no autolearn_force=no version=4.0.1 X-Spam-Virus: No X-Envelope-From: Received: from mail-106117.protonmail.ch (mail-106117.protonmail.ch [79.135.106.117]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by php-smtp4.php.net (Postfix) with ESMTPS for ; Mon, 13 Apr 2026 11:02:31 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gpb.moe; s=protonmail2; t=1776078144; x=1776337344; bh=NDCmnBzkxKv3QdO2VNW7OpFBLhvnUlttt2jSW4V07No=; h=Date:To:From:Cc:Subject:Message-ID:In-Reply-To:References: Feedback-ID:From:To:Cc:Date:Subject:Reply-To:Feedback-ID: Message-ID:BIMI-Selector; b=JK+P6CycyXusgqOb11eDyvgrciLgs3H5exBloFF3uZVP5oRt5dxv2Q2RJaVgbmMkg wsLvwcULDJr7Sh3f6K7EhfXivM0hNLDVYqvHNB7YQkLpviz6zmVhATXZNBZx95usdn YVHgYuhB4Ue8WJchTs5F1XKMQ97CKaFReOxDAZXYlobaRAIHDqNJvcWm8lRyIyWGJI 5guNEt1U3cjRbRXDMA0kuee7tFRlnK/hhJPnX/hYi3sLK9+sMNnD88/DPNzBeXyN30 pKVu8ZoKoojL42yWoHNlQlSVyaHpIf6u2fmynU8vqXiIXfKkM/nEhBhxQX/VKerMeC EfgkuIOJCY3lQ== Date: Mon, 13 Apr 2026 11:02:21 +0000 To: Jorg Sowa Cc: PHP internals Subject: Re: [PHP-DEV] [RFC] Secure Session Configuration Defaults Message-ID: In-Reply-To: References: Feedback-ID: 96993444:user:proton X-Pm-Message-ID: 7c85fd6560e320a2320d872f2790e54f6c20cf9c Precedence: list list-help: list-unsubscribe: list-post: List-Id: x-ms-reactions: disallow MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="b1=_mKTTqXPpUxX29ki24vxGoM57mPpOK3lvmISd68gJdM" From: internals@gpb.moe ("Gina P. Banyard") --b1=_mKTTqXPpUxX29ki24vxGoM57mPpOK3lvmISd68gJdM Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: base64 T24gU2F0dXJkYXksIDExIEFwcmlsIDIwMjYgYXQgMTk6MjYsIEpvcmcgU293YSA8am9yZy5zb3dh QGdtYWlsLmNvbT4gd3JvdGU6Cgo+IEhlbGxvIGludGVybmFscywKPiBJIHdvdWxkIGxpa2UgdG8g cHJvcG9zZSBSRkMgYWJvdXQgc2VjdXJpbmcgdGhlIHNlc3Npb24gY29uZmlndXJhdGlvbiBkZWZh dWx0cy4gSXQncyBiZWVuIGFscmVhZHkgZGlzY3Vzc2VkIG1hbnkgdGltZXMgaW4gdGhlIGdpdGh1 YiBpc3N1ZXMsIHNvIEkgd291bGQgbGlrZSB0byBmaW5hbGx5IGNyZWF0ZSBhbmQgUkZDIGFib3V0 IGl0Lgo+IExpbms6Cj4gaHR0cHM6Ly93aWtpLnBocC5uZXQvcmZjL3Nlc3Npb25fc2VjdXJpdHlf ZGVmYXVsdHMKPgo+IEtpbmQgcmVnYXJkcywKPiBKb3JnCgpIZWxsbywKClRoYW5rIHlvdSBmb3Ig dGFja2xpbmcgdGhpcywgSSB3YXMgcGxhbm5pbmcgb24gZG9pbmcgYSBzaW1pbGFyIFJGQyB0byBt b2Rlcm5pemUgZXh0L3Nlc3Npb24uClRoZSBtYWluIGNoYW5nZSBJIHdvdWxkIGxpa2UgdG8gc2Vl IGlzIHRvIGFjdHVhbGx5ICpkZXByZWNhdGUqIHRoZSBzZXNzaW9uLnVzZV9zdHJpY3RfbW9kZSBJ Tkkgc2V0dGluZyBhbmQgdG8gYWx3YXlzIGZvcmNlIGl0IHRvIDEuCgpUaGlzIHdvdWxkIHJlcXVp cmUgdXNlcmxhbmQgU2Vzc2lvbkhhbmRsZXJzIHRvIGFsd2F5cyBpbXBsZW1lbnQgdGhlIFtjcmVh dGVfc2lkXShodHRwczovL3d3dy5waHAubmV0L21hbnVhbC9lbi9zZXNzaW9uaWRpbnRlcmZhY2Uu Y3JlYXRlLXNpZC5waHApIGFuZCBbdmFsaWRhdGVJZF0oaHR0cHM6Ly93d3cucGhwLm5ldC9tYW51 YWwvZW4vc2Vzc2lvbnVwZGF0ZXRpbWVzdGFtcGhhbmRsZXJpbnRlcmZhY2UudmFsaWRhdGVpZC5w aHApIG1ldGhvZHMuCk5vdyBmb3Igc29tZSByZWFzb24gdGhlc2UgYXJlIG9uIDIgZGlmZmVyZW50 IGludGVyZmFjZXMgd2hpY2ggSSBkb24ndCB1bmRlcnN0YW5kLgpJbXBsZW1lbnRhdGlvbiB3aXNl LCBJIHdvdWxkbid0IGZvcmNlIGNsYXNzZXMgdG8gaW1wbGVtZW50IHRoZSBkaWZmZXJlbnQgaW50 ZXJmYWNlcywgYnV0IGp1c3QgZW1pdCBhIGRlcHJlY2F0aW9uIHRoYXQgdGhlc2UgbWV0aG9kcyB3 aWxsIGJlIHJlcXVpcmVkIGFuZCBtb3ZlIHRoZSBtZXRob2RzIG9udG8gdGhlIGdlbmVyaWMgU2Vz c2lvbkhhbmRsZXJJbnRlcmZhY2UgaW4gUEhQIDkuCgo+CgpIYXBweSB0byB3b3JrIG9uIHRoaXMg aW1wbGVtZW50YXRpb24gb2YgdGhpcyBpZiBuZWVkZWQuCgpCZXN0IHJlZ2FyZHMsCkdpbmEgUC4g QmFueWFyZA== --b1=_mKTTqXPpUxX29ki24vxGoM57mPpOK3lvmISd68gJdM Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: base64 PGRpdiBzdHlsZT0iZm9udC1mYW1pbHk6IEFyaWFsLCBzYW5zLXNlcmlmOyBmb250LXNpemU6IDE0 cHg7Ij48ZGl2Pk9uIFNhdHVyZGF5LCAxMSBBcHJpbCAyMDI2IGF0IDE5OjI2LCBKb3JnIFNvd2Eg Jmx0O2pvcmcuc293YUBnbWFpbC5jb20mZ3Q7IHdyb3RlOjxicj4NCiAgICAgICAgPGJsb2NrcXVv dGUgY2xhc3M9InByb3Rvbm1haWxfcXVvdGUiIHR5cGU9ImNpdGUiPg0KICAgICAgICAgICAgPGRp diBkaXI9Imx0ciI+PGRpdj48ZGl2PjxkaXY+SGVsbG8gaW50ZXJuYWxzLDxicj48L2Rpdj5JIHdv dWxkIGxpa2UgdG8gcHJvcG9zZSBSRkMgYWJvdXQgc2VjdXJpbmcgdGhlIHNlc3Npb24gY29uZmln dXJhdGlvbiBkZWZhdWx0cy4gSXQncyBiZWVuIGFscmVhZHkgZGlzY3Vzc2VkIG1hbnkgdGltZXMg aW4gdGhlIGdpdGh1YiBpc3N1ZXMsIHNvIEkgd291bGQgbGlrZSB0byBmaW5hbGx5IGNyZWF0ZSBh bmQgUkZDIGFib3V0IGl0Ljxicj48YnI+PC9kaXY+PGRpdj5MaW5rOjxicj48YSBocmVmPSJodHRw czovL3dpa2kucGhwLm5ldC9yZmMvc2Vzc2lvbl9zZWN1cml0eV9kZWZhdWx0cyIgdGFyZ2V0PSJf YmxhbmsiIHJlbD0ibm9yZWZlcnJlciBub2ZvbGxvdyBub29wZW5lciI+aHR0cHM6Ly93aWtpLnBo cC5uZXQvcmZjL3Nlc3Npb25fc2VjdXJpdHlfZGVmYXVsdHM8L2E+PC9kaXY+PGRpdj48YnI+PC9k aXY+S2luZCByZWdhcmRzLDxicj48L2Rpdj48L2Rpdj48ZGl2IGRpcj0ibHRyIj5Kb3JnPC9kaXY+ PC9ibG9ja3F1b3RlPjxkaXYgZGlyPSJsdHIiPjxicj48L2Rpdj48ZGl2IGRpcj0ibHRyIj5IZWxs byw8L2Rpdj48ZGl2IGRpcj0ibHRyIj48YnI+PC9kaXY+PGRpdiBkaXI9Imx0ciI+VGhhbmsgeW91 IGZvciB0YWNrbGluZyB0aGlzLCBJIHdhcyBwbGFubmluZyBvbiBkb2luZyBhIHNpbWlsYXIgUkZD IHRvIG1vZGVybml6ZSBleHQvc2Vzc2lvbi48L2Rpdj48ZGl2IGRpcj0ibHRyIj5UaGUgbWFpbiBj aGFuZ2UgSSB3b3VsZCBsaWtlIHRvIHNlZSBpcyB0byBhY3R1YWxseSAqZGVwcmVjYXRlKiB0aGUm bmJzcDs8Y29kZT5zZXNzaW9uLnVzZV9zdHJpY3RfbW9kZTwvY29kZT48c3BhbiBzdHlsZT0iZm9u dC1mYW1pbHk6IEFyaWFsLCBzYW5zLXNlcmlmOyBmb250LXNpemU6IDE0cHg7IGxpbmUtaGVpZ2h0 OiBub3JtYWw7IGZvbnQtd2VpZ2h0OiA0MDA7Ij4gSU5JIHNldHRpbmcgYW5kIHRvIGFsd2F5cyBm b3JjZSBpdCB0byAxLjwvc3Bhbj48L2Rpdj48ZGl2IGRpcj0ibHRyIj48c3BhbiBzdHlsZT0iZm9u dC1mYW1pbHk6IEFyaWFsLCBzYW5zLXNlcmlmOyBmb250LXNpemU6IDE0cHg7IGxpbmUtaGVpZ2h0 OiBub3JtYWw7IGZvbnQtd2VpZ2h0OiA0MDA7Ij48YnI+PC9zcGFuPjwvZGl2PjxkaXYgZGlyPSJs dHIiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTogQXJpYWwsIHNhbnMtc2VyaWY7IGZvbnQtc2l6 ZTogMTRweDsgbGluZS1oZWlnaHQ6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IDQwMDsiPlRoaXMgd291 bGQgcmVxdWlyZSB1c2VybGFuZCBTZXNzaW9uSGFuZGxlcnMgdG8gYWx3YXlzIGltcGxlbWVudCB0 aGUmbmJzcDs8c3Bhbj48YSBocmVmPSJodHRwczovL3d3dy5waHAubmV0L21hbnVhbC9lbi9zZXNz aW9uaWRpbnRlcmZhY2UuY3JlYXRlLXNpZC5waHAiPmNyZWF0ZV9zaWQ8L2E+PC9zcGFuPiZuYnNw O2FuZCZuYnNwOzxzcGFuPjxhIGhyZWY9Imh0dHBzOi8vd3d3LnBocC5uZXQvbWFudWFsL2VuL3Nl c3Npb251cGRhdGV0aW1lc3RhbXBoYW5kbGVyaW50ZXJmYWNlLnZhbGlkYXRlaWQucGhwIj52YWxp ZGF0ZUlkPC9hPjwvc3Bhbj4mbmJzcDttZXRob2RzLjwvc3Bhbj48L2Rpdj48ZGl2IGRpcj0ibHRy Ij48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IEFyaWFsLCBzYW5zLXNlcmlmOyBmb250LXNpemU6 IDE0cHg7IGxpbmUtaGVpZ2h0OiBub3JtYWw7IGZvbnQtd2VpZ2h0OiA0MDA7Ij5Ob3cgZm9yIHNv bWUgcmVhc29uIHRoZXNlIGFyZSBvbiAyIGRpZmZlcmVudCBpbnRlcmZhY2VzIHdoaWNoIEkgZG9u J3QgdW5kZXJzdGFuZC48L3NwYW4+PC9kaXY+PGRpdiBkaXI9Imx0ciI+PHNwYW4gc3R5bGU9ImZv bnQtZmFtaWx5OiBBcmlhbCwgc2Fucy1zZXJpZjsgZm9udC1zaXplOiAxNHB4OyBsaW5lLWhlaWdo dDogbm9ybWFsOyBmb250LXdlaWdodDogNDAwOyI+SW1wbGVtZW50YXRpb24gd2lzZSwgSSB3b3Vs ZG4ndCBmb3JjZSBjbGFzc2VzIHRvIGltcGxlbWVudCB0aGUgZGlmZmVyZW50IGludGVyZmFjZXMs IGJ1dCBqdXN0IGVtaXQgYSBkZXByZWNhdGlvbiB0aGF0IHRoZXNlIG1ldGhvZHMgd2lsbCBiZSBy ZXF1aXJlZCBhbmQgbW92ZSB0aGUgbWV0aG9kcyBvbnRvIHRoZSBnZW5lcmljJm5ic3A7PHNwYW4+ U2Vzc2lvbkhhbmRsZXJJbnRlcmZhY2U8L3NwYW4+Jm5ic3A7aW4gUEhQIDkuPC9zcGFuPjwvZGl2 PjxibG9ja3F1b3RlIGNsYXNzPSJwcm90b25tYWlsX3F1b3RlIiB0eXBlPSJjaXRlIj4NCg0KICAg ICAgICA8L2Jsb2NrcXVvdGU+PHNwYW4+PC9zcGFuPjxkaXY+PGJyPjwvZGl2PjxkaXY+SGFwcHkg dG8gd29yayBvbiB0aGlzIGltcGxlbWVudGF0aW9uIG9mIHRoaXMgaWYgbmVlZGVkLjwvZGl2Pjxk aXY+PGJyPjwvZGl2PjxkaXY+DQogICAgPGRpdj4NCiAgICAgICAgPGRpdiBzdHlsZT0iYmFja2dy b3VuZC1jb2xvcjogcmdiKDI1NSwgMjU1LCAyNTUpOyI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5 OlZlcmRhbmEsIHNhbnMtc2VyaWYiPkJlc3QgcmVnYXJkcyw8L3NwYW4+PC9kaXY+PGRpdiBzdHls ZT0iYmFja2dyb3VuZC1jb2xvcjogcmdiKDI1NSwgMjU1LCAyNTUpOyI+PGJyPjwvZGl2PjxzcGFu IHN0eWxlPSJiYWNrZ3JvdW5kLWNvbG9yOiByZ2IoMjU1LCAyNTUsIDI1NSk7Ij48c3BhbiBzdHls ZT0iZm9udC1mYW1pbHk6VmVyZGFuYSwgc2Fucy1zZXJpZiI+R2luYSBQLiBCYW55YXJkPC9zcGFu Pjwvc3Bhbj48L2Rpdj48L2Rpdj48YnI+DQogICAgPC9kaXY+PC9kaXY+ --b1=_mKTTqXPpUxX29ki24vxGoM57mPpOK3lvmISd68gJdM--