Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:60901
Return-Path: <ircmaxell@gmail.com>
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Delivered-To: mailing list internals@lists.php.net
Received: (qmail 35458 invoked from network); 20 Jun 2012 10:05:57 -0000
Received: from unknown (HELO lists.php.net) (127.0.0.1)
  by localhost with SMTP; 20 Jun 2012 10:05:57 -0000
Authentication-Results: pb1.pair.com smtp.mail=ircmaxell@gmail.com; spf=pass; sender-id=pass
Authentication-Results: pb1.pair.com header.from=ircmaxell@gmail.com; sender-id=pass
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.216.170 as permitted sender)
X-PHP-List-Original-Sender: ircmaxell@gmail.com
X-Host-Fingerprint: 209.85.216.170 mail-qc0-f170.google.com  
Received: from [209.85.216.170] ([209.85.216.170:33355] helo=mail-qc0-f170.google.com)
	by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP
	id FF/61-25489-580A1EF4 for <internals@lists.php.net>; Wed, 20 Jun 2012 06:05:57 -0400
Received: by qcmt36 with SMTP id t36so4730509qcm.29
        for <internals@lists.php.net>; Wed, 20 Jun 2012 03:05:54 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20120113;
        h=mime-version:in-reply-to:references:date:message-id:subject:from:to
         :cc:content-type;
        bh=DMR1Fu249aGY+aQJ7op7LsnLPe92NaClytE+yf7hJ+g=;
        b=hJk4JSKMon1dt8MUH5ykuyX7n0toMa1rjv3hcq9uLE2bnWzY+deUu+WyG60dz75Dxg
         eseiPexCHPRIVC1tOLvS2efIj2aLezBlHxkqo2KQMFl8TXlq9Ecyz1wSCYpTM01UmK+h
         bHQj3gYyjdaqhJ12Ng4rBNmACfY27XSPVC0IQ2fjH9SnPvNoqOxg5b2uz3yjpz1AfG2v
         +ais1v6HSGOYYZ8jqKxE3J6E8m5cZpIZ67EZZya7IQX6FvBjpcOcmzrfgCek63gDmIWA
         2cxGe4jtLWRF+snzbPQuc0oFAVM+Tz0Wq7ypilUk1P84VcRsdk3mPwWYs6mEJ6Fi2ON/
         miAQ==
MIME-Version: 1.0
Received: by 10.224.78.195 with SMTP id m3mr34979799qak.1.1340186754864; Wed,
 20 Jun 2012 03:05:54 -0700 (PDT)
Received: by 10.229.232.11 with HTTP; Wed, 20 Jun 2012 03:05:54 -0700 (PDT)
In-Reply-To: <4FE0FC9C.5070900@gmail.com>
References: <CAF+90c-6VWJ_kBW=Z8Br-NOxKyuTkwStRg-OMBa6844w3=CjDA@mail.gmail.com>
	<8714BC2A-45E2-4303-9769-8399AF316159@gmail.com>
	<CAEZPtU6tXBgnTuGOfnjjFYyFJQ5iKpWX2Tq1U+wEaoyvBchW7A@mail.gmail.com>
	<3B162E01-67F6-4684-ACE7-40CAF73E9DC3@gmail.com>
	<CAEZPtU7scvZegC8udp2eM65hYGHX4F-B_109GPMrXETOBjpRWg@mail.gmail.com>
	<CAAyV7nEfoBKeCJe8pXZQJWi+MD7JrrOTjSV8RJpvq=mGYL5iGg@mail.gmail.com>
	<4FE0FC9C.5070900@gmail.com>
Date: Wed, 20 Jun 2012 06:05:54 -0400
Message-ID: <CAAyV7nGii+E6+ExnjkW-u3HWri=XO21mcwxji-2RPRvwHR_35Q@mail.gmail.com>
To: =?ISO-8859-1?Q?=C1ngel_Gonz=E1lez?= <keisial@gmail.com>
Cc: Pierre Joye <pierre.php@gmail.com>, Alexey Zakhlestin <indeyets@gmail.com>, 
	PHP internals <internals@lists.php.net>
Content-Type: text/plain; charset=ISO-8859-1
Subject: Re: [PHP-DEV] Adding a simple API for secure password hashing?
From: ircmaxell@gmail.com (Anthony Ferrara)

Angel,

> I don't think the code is the most appropiate one, but I suppose that's
> not a final proposal.

Correct, it was just to fill out the interface a bit so that people
could play with it and see how the interface worked...

> The interfaces look good to me.
> I'd maybe set the default $algo to PASSWORD_DEFAULT_HASH or similar,
> being a value bumped on each next revisions.

Yeah, that's a good idea. Makes it easier to update without changing
the interface.

> I would consider preferable to have the $ ofpassword_register_algoprefix
> implicit.

That's fair.

Thanks,

Anthony