Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:60979 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 77175 invoked from network); 27 Jun 2012 10:30:27 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 27 Jun 2012 10:30:27 -0000 Received: from [127.0.0.1] ([127.0.0.1:9540]) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ECSTREAM id 79/91-02132-2C0EAEF4 for ; Wed, 27 Jun 2012 06:30:26 -0400 Authentication-Results: pb1.pair.com header.from=simonsimcity@gmail.com; sender-id=pass Authentication-Results: pb1.pair.com smtp.mail=simonsimcity@gmail.com; spf=pass; sender-id=pass Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.214.170 as permitted sender) X-PHP-List-Original-Sender: simonsimcity@gmail.com X-Host-Fingerprint: 209.85.214.170 mail-ob0-f170.google.com Received: from [209.85.214.170] ([209.85.214.170:44467] helo=mail-ob0-f170.google.com) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id DD/71-02132-DCCDAEF4 for ; Wed, 27 Jun 2012 06:13:33 -0400 Received: by obfk16 with SMTP id k16so1511516obf.29 for ; Wed, 27 Jun 2012 03:13:30 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=meDeDauo9u+7qoDZV2Vu3zfaJHVCv+b19eKthdbiGGM=; b=Dex9AZPHhYkF1Ropil6hH2oGQq28nPZevJt8q3KDCEhBUZDwjSpt/LHn8MT8oIPofR kkZ4rhKZYndVVZ5kJe+QaKaiwquv43ca/4y1YxXzbFtaiOzRUwy8oWnagYCB2hhlm/J0 IgbdOhKXjyS8yNzPxtIo+NFTXuLOqMeJ5c1A2qW43E1iQD3hRU+oGjrfDeQtF61F1n7m We9QOphb5ba2UJp+U+q5kjA/9CcAvjbmGLdQ9+hHQ71uiSDemtZXPrSPBg1iK5UEfkdF ZHEgEs2uS4/4ak1bp1R2Xe+vvxvY5nlvbWXyct7k3NSe+H0EyQtFdXwWTUn0kgAfAaRX qlrA== MIME-Version: 1.0 Received: by 10.60.26.134 with SMTP id l6mr19778143oeg.40.1340792010750; Wed, 27 Jun 2012 03:13:30 -0700 (PDT) Received: by 10.60.41.166 with HTTP; Wed, 27 Jun 2012 03:13:30 -0700 (PDT) In-Reply-To: References: Date: Wed, 27 Jun 2012 12:13:30 +0200 Message-ID: To: Anthony Ferrara Cc: internals@lists.php.net Content-Type: multipart/alternative; boundary=e89a8ff1c63c84b98804c37177c9 Subject: Re: [PHP-DEV] [DRAFT RFC] Adding Simplified Password Hashing API From: simonsimcity@gmail.com (Simon Schick) --e89a8ff1c63c84b98804c37177c9 Content-Type: text/plain; charset=UTF-8 Hi, Anthony Some questions coming up in my mind by reading this RFC: * Will the value of the constant *PASSWORD_DEFAULT* remain unchanged forever? Otherwise this lib, in my opinion, can cause big problems when trying to port an existing system to a newer PHP-version. * Is this a native version of phpass? http://www.openwall.com/phpass/ Sorry if those things have already been discussed somewhere. I was not actively following this list in the last weeks ;) Bye Simon On Tue, Jun 26, 2012 at 5:25 PM, Anthony Ferrara wrote: > Hello All, > > I've taken the conversation of the previous simplified password > hashing API, and generated a patch and draft RFC for it. The patch > isn't ready yet (needs review, cleanup and testing), but it's a start. > > https://wiki.php.net/rfc/password_hash > > Please have a look and comment away! > > Thanks, > > Anthony > > -- > PHP Internals - PHP Runtime Development Mailing List > To unsubscribe, visit: http://www.php.net/unsub.php > > --e89a8ff1c63c84b98804c37177c9--