Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:62573
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.217.170 as permitted sender)
MIME-Version: 1.0
In-Reply-To: <CAAyV7nFRT24rksh6iDWxstfQwJ4+KdEC7Zs6EC8wBtJ8Zorf7w@mail.gmail.com>
References: <CAAyV7nFRT24rksh6iDWxstfQwJ4+KdEC7Zs6EC8wBtJ8Zorf7w@mail.gmail.com>
Date: Tue, 28 Aug 2012 11:28:07 -0400
Message-ID: <CAAyV7nGbRzb5sMs3N7uz51d1c-2-2n51jfWYhZncstTv0GAtbA@mail.gmail.com>
To: internals@lists.php.net
Content-Type: multipart/alternative; boundary=14dae9d71976d037b604c855162d
Subject: Re: [PROPOSED] password_hash RFC - Implementing simplified password
 hashing functions
From: ircmaxell@gmail.com (Anthony Ferrara)

--14dae9d71976d037b604c855162d
Content-Type: text/plain; charset=ISO-8859-1

>
> Hello all,
>
> Since the discussion has died down around the concept, I have updated the
> RFC and moved it into Proposed (under discussion) status.
>
> I have updated the RFC to include a section on discussion points
> containing points that I know were raised but I felt were not closed (there
> was some debate or disagreement). I tried to include a simple description
> of both arguments, and the position the RFC currently takes and a brief
> reason why.
>
> https://wiki.php.net/rfc/password_hash
>
> Please have a look and provide any feedback!
>

I've removed the password_make_salt() function from being exposed and
updated the RFC to indicate such. It can be added as a later change if
needed.

I plan on opening the vote on this next week, so if there's anything else
anyone wants to discuss, please speak up!

Anthony

--14dae9d71976d037b604c855162d--