Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:70714 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 7774 invoked from network); 17 Dec 2013 16:06:43 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 17 Dec 2013 16:06:43 -0000 Authentication-Results: pb1.pair.com header.from=ajf@ajf.me; sender-id=pass Authentication-Results: pb1.pair.com smtp.mail=ajf@ajf.me; spf=pass; sender-id=pass Received-SPF: pass (pb1.pair.com: domain ajf.me designates 198.187.29.241 as permitted sender) X-PHP-List-Original-Sender: ajf@ajf.me X-Host-Fingerprint: 198.187.29.241 imap3-1.ox.registrar-servers.com Received: from [198.187.29.241] ([198.187.29.241:37033] helo=imap3-1.ox.registrar-servers.com) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id 45/C1-32483-29670B25 for ; Tue, 17 Dec 2013 11:06:43 -0500 Received: from localhost (localhost [127.0.0.1]) by oxmail.registrar-servers.com (Postfix) with ESMTP id 180BD2A00A7; Tue, 17 Dec 2013 11:06:37 -0500 (EST) X-Virus-Scanned: Debian amavisd-new at imap3.ox.registrar-servers.com Received: from oxmail.registrar-servers.com ([127.0.0.1]) by localhost (imap3.ox.registrar-servers.com [127.0.0.1]) (amavisd-new, port 10024) with LMTP id sgI4LSjEvs-v; Tue, 17 Dec 2013 11:06:36 -0500 (EST) Received: from [192.168.0.13] (unknown [94.13.99.191]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by oxmail.registrar-servers.com (Postfix) with ESMTPSA id CF9EE2A00A8; Tue, 17 Dec 2013 11:06:34 -0500 (EST) Message-ID: <52B07689.9010505@ajf.me> Date: Tue, 17 Dec 2013 16:06:33 +0000 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.2.0 MIME-Version: 1.0 To: Joe Watkins , internals@lists.php.net, Ferenc Kovacs References: <52AFABF7.60105@sugarcrm.com> <52B004E2.30607@php.net> <52B03511.8040603@php.net> <52B03ADB.9050703@php.net> In-Reply-To: <52B03ADB.9050703@php.net> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Subject: Re: [PHP-DEV] [VOTE] TLS Peer Verification From: ajf@ajf.me (Andrea Faulds) On 17/12/13 11:51, Joe Watkins wrote: > I'm saying that we should, definitely, accept the patch; in this > specific case we can fix the implementation or security issue without > affecting behaviour, Unfortunately that's not true. To fix the security issue REQUIRES affecting behaviour. Otherwise it's not fixed. -- Andrea Faulds http://ajf.me/