Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:62947
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.210.170 as permitted sender)
MIME-Version: 1.0
In-Reply-To: <CAAyV7nGgZp2RkvhUTPBZPCsKOFKDBPtPqJipxJikGo4tjis4JA@mail.gmail.com>
References: <CAAyV7nHZ6Kr7yKF0B-UgauN6eKKxRsqCztP9w9hUzOdiPLHYAw@mail.gmail.com>
	<CADNQb0USW3j7BWEjvDwOdCKoLy3xVJ8eCRjZ610ekKmTL7R9VQ@mail.gmail.com>
	<CAAyV7nGA=1pWLj1G+X1EvoNB0jb4ji6oJ2tGZNwXH=CCae_9wA@mail.gmail.com>
	<CADNQb0XRrh21QX1qmqvHpvONRSOARXQpC8XroCFiw2z6F2Px5Q@mail.gmail.com>
	<504E6862.4080608@sugarcrm.com>
	<CAEZPtU6ssaABEd3ot54kZ1TAv7kKMFiOxa2dMq_+RMfoMr0AKg@mail.gmail.com>
	<CAAyV7nGgZp2RkvhUTPBZPCsKOFKDBPtPqJipxJikGo4tjis4JA@mail.gmail.com>
Date: Tue, 11 Sep 2012 13:53:47 +0200
Message-ID: <CAEZPtU7-2t-DkakvH_FrpLKy1986BjOUuNpzqo2KbQ8Y-6-Wyw@mail.gmail.com>
To: Anthony Ferrara <ircmaxell@gmail.com>
Cc: Stas Malyshev <smalyshev@sugarcrm.com>, Hannes Magnusson <hannes.magnusson@gmail.com>, 
	"internals@lists.php.net" <internals@lists.php.net>
Content-Type: text/plain; charset=ISO-8859-1
Subject: Re: [PHP-DEV] [VOTE] Add simplified password hashing API
From: pierre.php@gmail.com (Pierre Joye)

hi,

On Tue, Sep 11, 2012 at 1:41 PM, Anthony Ferrara <ircmaxell@gmail.com> wrote:
> It's not the end of the world, because we can copy/paste that function into
> the PECL extension, and just conditionally include it. There would be
> duplication between the two, but it wouldn't be too bad...

agreed.


> Consider? Sure. But I'm not sure it's worth while. Stas brought up the
> adoption point, which I think is the kicker. The target audience for this
> API is not the type that usually has access to install PECL extensions. So
> while some may use it as an extension, the majority who would significantly
> benefit from it wouldn't be able to. So the benefit to releasing it as a
> PECL extension would basically defeat the point...
>
> And to Stas's point about the PHP solution not being the same, I fail to
> understand why. It's built using identical algorithms (translated from C to
> PHP as best as possible). It's tested using the same tests with the only
> difference surrounding error messages. Plus it's portable (can be used on
> shared hosts). The only real difference is testing the PHP version doesn't
> say anything to the *security* of the C version. But it does test the API
> and the concept...

distros will provide it and that's the kicker. Believe, in the
beginning of the new ext/zip, having it pecl drastically improve the
adoption through distros. Less now as we have frequent PHP releases
(also why I do much more less pecl releases ;).

Cheers,
-- 
Pierre

@pierrejoye | http://blog.thepimp.net | http://www.libgd.org