Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:70715 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 9374 invoked from network); 17 Dec 2013 16:09:08 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 17 Dec 2013 16:09:08 -0000 Authentication-Results: pb1.pair.com header.from=ajf@ajf.me; sender-id=pass Authentication-Results: pb1.pair.com smtp.mail=ajf@ajf.me; spf=pass; sender-id=pass Received-SPF: pass (pb1.pair.com: domain ajf.me designates 198.187.29.233 as permitted sender) X-PHP-List-Original-Sender: ajf@ajf.me X-Host-Fingerprint: 198.187.29.233 imap1.ox.registrar-servers.com Received: from [198.187.29.233] ([198.187.29.233:45067] helo=imap1.ox.registrar-servers.com) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id E9/12-32483-32770B25 for ; Tue, 17 Dec 2013 11:09:07 -0500 Received: from localhost (localhost [127.0.0.1]) by oxmail.registrar-servers.com (Postfix) with ESMTP id EDADB2000E0; Tue, 17 Dec 2013 11:09:04 -0500 (EST) X-Virus-Scanned: Debian amavisd-new at imap1.ox.registrar-servers.com Received: from oxmail.registrar-servers.com ([127.0.0.1]) by localhost (imap1.ox.registrar-servers.com [127.0.0.1]) (amavisd-new, port 10024) with LMTP id BdN_d8STNw3c; Tue, 17 Dec 2013 11:09:04 -0500 (EST) Received: from [192.168.0.13] (unknown [94.13.99.191]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by oxmail.registrar-servers.com (Postfix) with ESMTPSA id 5D25E2000A7; Tue, 17 Dec 2013 11:08:59 -0500 (EST) Message-ID: <52B07715.2090606@ajf.me> Date: Tue, 17 Dec 2013 16:08:53 +0000 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.2.0 MIME-Version: 1.0 To: Ferenc Kovacs , Rasmus Lerdorf CC: Daniel Lowrey , Joe Watkins , PHP Internals References: <52AFABF7.60105@sugarcrm.com> <52B004E2.30607@php.net> <52B041E5.9070903@php.net> <52B0597F.600@lerdorf.com> In-Reply-To: Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Subject: Re: [PHP-DEV] [VOTE] TLS Peer Verification From: ajf@ajf.me (Andrea Faulds) On 17/12/13 14:06, Ferenc Kovacs wrote: > > True, distros would prefer their own bundle, what I was saying above, that > even though most people would be covered by the distros, there will be > people, who will notice the BC break: either because they roll their own > php or because they use a distribution which doesn't provide a CA by > default, or ultimately because they are sites out there, which uses certs > not signed by CAs included in the major CA bundles. > It'd be less of a concern however, surely. The users who don't use distros to obtain PHP have to do tinkering anyway and will have the ability to do as much. -- Andrea Faulds http://ajf.me/