Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:69771
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain adamharvey.name designates 209.85.223.169 as permitted sender)
MIME-Version: 1.0
Sender: adam@adamharvey.name
In-Reply-To: <5266B404.60806@php.net>
References: <CAGa2bXaRkv2asU1bAwXTe=9s7o2njsqxG8W8gE9OtcG=8G4qqg@mail.gmail.com>
 <8C33E1D9-8689-4E81-A79B-644CB690DB64@gmail.com> <CAGa2bXbkcn+hN5k=MeeOR3MaOn2kW_M_sKkcwfnOxhng8=gc8Q@mail.gmail.com>
 <CAGa2bXYONaoxFBbmDx_vXQCpWSxPfLUsQJDKoQ3OCo1gDTcBwQ@mail.gmail.com>
 <CAGa2bXYjLhaPUkDYWH+iRGeQuNvtCEwSYDn74uDNtyKzBWMs3w@mail.gmail.com>
 <52664C58.3020901@ajf.me> <CADajX4ACagw=F_sZnesP3uRj6s=+8kL0xahffMYBemckX4GMEg@mail.gmail.com>
 <5266B404.60806@php.net>
Date: Tue, 22 Oct 2013 10:23:56 -0700
Message-ID: <CADajX4Dex8BB1LidDG7-own+jBmuNQO4UhZngH+Vf-SWBzxcww@mail.gmail.com>
To: Joe Watkins <krakjoe@php.net>
Cc: PHP internals <internals@lists.php.net>
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Subject: Re: [PHP-DEV] [VOTE] Change crypt() behavior w/o salt
From: aharvey@php.net (Adam Harvey)

On 22 October 2013 10:21, Joe Watkins <krakjoe@php.net> wrote:
> On 10/22/2013 06:11 PM, Adam Harvey wrote:
>> "Generating an insecure weak hash as no salt was given: please ensure
>> the salt parameter is specified and uses a strong hash type in order
>> to generate a cryptographically secure hash"
>
> Wonder how well it will translate ??

I tried to use the obvious scary keywords to make it obvious. If you
think the grammar on that version is convoluted, you should have seen
the first draft. :)

> Generating should be Generated, no ??

I like the present tense here =E2=80=94 it's what crypt() IS doing, not wha=
t
it did. Makes it urgent. That said, I'm not super fussed either way.

Adam