Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:69237
Return-Path: <keisial@gmail.com>
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Delivered-To: mailing list internals@lists.php.net
Received: (qmail 90066 invoked from network); 20 Sep 2013 00:23:02 -0000
Received: from unknown (HELO lists.php.net) (127.0.0.1)
  by localhost with SMTP; 20 Sep 2013 00:23:02 -0000
Authentication-Results: pb1.pair.com header.from=keisial@gmail.com; sender-id=pass
Authentication-Results: pb1.pair.com smtp.mail=keisial@gmail.com; spf=pass; sender-id=pass
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.212.171 as permitted sender)
X-PHP-List-Original-Sender: keisial@gmail.com
X-Host-Fingerprint: 209.85.212.171 mail-wi0-f171.google.com  
Received: from [209.85.212.171] ([209.85.212.171:33269] helo=mail-wi0-f171.google.com)
	by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP
	id 6A/40-20998-5659B325 for <internals@lists.php.net>; Thu, 19 Sep 2013 20:23:02 -0400
Received: by mail-wi0-f171.google.com with SMTP id hm2so8738613wib.16
        for <internals@lists.php.net>; Thu, 19 Sep 2013 17:22:57 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20120113;
        h=message-id:date:from:user-agent:mime-version:to:cc:subject
         :references:in-reply-to:content-type:content-transfer-encoding;
        bh=euHxh+XwiWv3WMSF6sogG+sFnaBZwC0wUktmY5Uzrcg=;
        b=UUicX7r05FXKLB7XXSUfYZsWYtEEK5qMFy6hoy/7T45t18lJnT7kXIFiW5Y1CmG6AG
         72PJ9j6aCA2K9SDjbWPGltj+cEaKtRZ2udtRQvgYcvbslxbrMemi2CIgjUKDuWG13f15
         QICLJJo4tg17U09mU9yuzFaFS8R7b77WnjZ3v3E9cManBIpc9r5nhihnOerEhzs6ZxHJ
         ZODjLQZKmc/Cy/C3z31BtpLpB+MnOnBNOVzilCnmOQmLpinStwCur/wRl1tHS5CV6JxC
         AguMdAN/jFOWoFHg7I3wK/H/FlIEn6/lQrhFJwFQOpPDZ36vMFgXi6XhT3Cc675NzPOu
         ZCiQ==
X-Received: by 10.180.187.2 with SMTP id fo2mr417133wic.65.1379636577741;
        Thu, 19 Sep 2013 17:22:57 -0700 (PDT)
Received: from [192.168.1.37] (159.Red-88-15-24.dynamicIP.rima-tde.net. [88.15.24.159])
        by mx.google.com with ESMTPSA id mb7sm972493wic.10.1969.12.31.16.00.00
        (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128);
        Thu, 19 Sep 2013 17:22:57 -0700 (PDT)
Message-ID: <523B955F.8020109@gmail.com>
Date: Fri, 20 Sep 2013 02:22:55 +0200
User-Agent: Thunderbird
MIME-Version: 1.0
To: Adam Harvey <aharvey@php.net>
CC: Daniel Lowrey <rdlowrey@gmail.com>, 
 "Bryan C. Geraghty" <bryan@ravensight.org>,
 "internals@lists.php.net" <internals@lists.php.net>
References: <CAH8MpnnTGD0xAwG1j9sh10EC6XzdscVRLbJzEMG6qWSBK5c17w@mail.gmail.com> <523A466C.4070903@gmail.com> <CAHMUw2HxcWgOBxiK=r4y6FgWF_Gkhgc6BgHxF_bgLLJG9RVxmQ@mail.gmail.com> <CAEZPtU7YjNksHLEyH9VzM-iDdpQmBeJkF-BHPkAajZjiQS5XBA@mail.gmail.com> <CAHMUw2Gv=JdswmWVHCvp2S3WECVPEx4aWOQzF2yLMHaqJ5HK-g@mail.gmail.com> <000001ceb53c$492a3090$db7e91b0$@org> <CAH8MpnkX1p66AxeDXYaDiNaPBL635gKLXmS6qN=veB4H4CTicw@mail.gmail.com> <CADajX4BudWBoKwZ8Xo5_QENQifdH2V3MDXe3vGszWkPAbwgjZw@mail.gmail.com>
In-Reply-To: <CADajX4BudWBoKwZ8Xo5_QENQifdH2V3MDXe3vGszWkPAbwgjZw@mail.gmail.com>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
Subject: Re: [PHP-DEV] Re: Re: PHP Crypt functions - security audit
From: keisial@gmail.com (=?UTF-8?B?w4FuZ2VsIEdvbnrDoWxleg==?=)

On 19/09/13 23:41, Adam Harvey wrote:
> As for the CA bundle side of things, I wonder if this is one of those
> rare times where an ini setting might make sense, as opposed to actual
> bundling — that would allow distros to point to their packaged bundles
> without needing to patch php-src, and we could provide from-source
> installation instructions easily enough to point to common distro
> locations and the cURL download for users on more exotic OSes (like
> Windows).
>
> Adam
+1