Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:61078
Return-Path: <nikita.ppv@gmail.com>
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Delivered-To: mailing list internals@lists.php.net
Received: (qmail 57798 invoked from network); 3 Jul 2012 08:59:26 -0000
Received: from unknown (HELO lists.php.net) (127.0.0.1)
  by localhost with SMTP; 3 Jul 2012 08:59:26 -0000
Authentication-Results: pb1.pair.com smtp.mail=nikita.ppv@gmail.com; spf=pass; sender-id=pass
Authentication-Results: pb1.pair.com header.from=nikita.ppv@gmail.com; sender-id=pass
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.217.170 as permitted sender)
X-PHP-List-Original-Sender: nikita.ppv@gmail.com
X-Host-Fingerprint: 209.85.217.170 mail-lb0-f170.google.com  
Received: from [209.85.217.170] ([209.85.217.170:63259] helo=mail-lb0-f170.google.com)
	by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP
	id BB/A2-42839-D64B2FF4 for <internals@lists.php.net>; Tue, 03 Jul 2012 04:59:26 -0400
Received: by lbgc1 with SMTP id c1so9876447lbg.29
        for <internals@lists.php.net>; Tue, 03 Jul 2012 01:59:22 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20120113;
        h=mime-version:in-reply-to:references:date:message-id:subject:from:to
         :cc:content-type;
        bh=YDd3ElSIBxvGw/pXKDgIZMweymRg9mj1ZPgL9kTCh9M=;
        b=bBKhvGmXeJSTsjqny4QlDAxeA6X9GFuemrEE8UH7z32sXx0iJzvoIRT8XsatDybG6K
         SA+7xF/ozHS2vqIysoshLXKYAfguMxxEuf/8xYyi2W0suimP06SUn8j7inUED0YD0+/U
         rtylqovBME/Eb5PCLhN1e/IxAeVd0b4VrzuiyGQ2oacEXNxgj2m6H6dP/w1eo7nnFFFW
         1GphtRr0rgYsVNO7/lEMgXx7zdYxgqRd67SvVeUKGOHnfYgtw576M+OMegdRvARcp0+u
         wWNA+DPCsUm3mgbx8Qnt4aeyWoLhdr97TTuat6EqElukrgr9PKwJsvs0Bu9jsjMaE8gU
         WGgA==
MIME-Version: 1.0
Received: by 10.152.113.68 with SMTP id iw4mr16370177lab.50.1341305962353;
 Tue, 03 Jul 2012 01:59:22 -0700 (PDT)
Received: by 10.152.114.70 with HTTP; Tue, 3 Jul 2012 01:59:22 -0700 (PDT)
In-Reply-To: <CAEZPtU5OfePpshGBt37pAwXQWtb-wEh91O=0gYz_Ttc87Dg_UQ@mail.gmail.com>
References: <CAAyV7nH6FCZUqrirJ0uOApuwR64Cky3cVnRfbrcjkZrpOKiN6w@mail.gmail.com>
	<4FF1FD89.6090308@oracle.com>
	<CAAyV7nFbVwZmxwnJhvdyHGydm1pJYL4P2obAsCFR0iKoxU5WHA@mail.gmail.com>
	<4FF210F7.7070307@oracle.com>
	<CAAyV7nGOfH_1XB4wOVhEBNaZ9u3Wa29n1MYPGCi+qSkuSmuh8g@mail.gmail.com>
	<CAEZPtU5OfePpshGBt37pAwXQWtb-wEh91O=0gYz_Ttc87Dg_UQ@mail.gmail.com>
Date: Tue, 3 Jul 2012 10:59:22 +0200
Message-ID: <CAF+90c-xzxNizaUFipKSKctLK5MXWs-6YsXjb0-RApvBg_zjZQ@mail.gmail.com>
To: Pierre Joye <pierre.php@gmail.com>
Cc: Anthony Ferrara <ircmaxell@gmail.com>, Christopher Jones <christopher.jones@oracle.com>, 
	internals@lists.php.net
Content-Type: text/plain; charset=ISO-8859-1
Subject: Re: [PHP-DEV] [DRAFT RFC] Adding Simplified Password Hashing API
From: nikita.ppv@gmail.com (Nikita Popov)

On Tue, Jul 3, 2012 at 10:42 AM, Pierre Joye <pierre.php@gmail.com> wrote:
> hi!
>
> On Tue, Jul 3, 2012 at 1:23 AM, Anthony Ferrara <ircmaxell@gmail.com> wrote:
>
>> Well, if not for an ini parameter, what way would you suggest to alter
>> the default bcrypt cost? (seriously, I'm open to suggestions)...
>
> Simply by not allowing to change it. If one does not like it, it can
> pass the option value as he wishes.
>
> An ini setting for that sounds wrong to me.
Agree on this. We don't need any more ini settings. Having an
ini-setting would just force everyone to explicitly specify the load
parameter.

Nikita