Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:72099 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 248 invoked from network); 3 Feb 2014 19:00:49 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 3 Feb 2014 19:00:49 -0000 Authentication-Results: pb1.pair.com header.from=tyra3l@gmail.com; sender-id=pass Authentication-Results: pb1.pair.com smtp.mail=tyra3l@gmail.com; spf=pass; sender-id=pass Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.216.44 as permitted sender) X-PHP-List-Original-Sender: tyra3l@gmail.com X-Host-Fingerprint: 209.85.216.44 mail-qa0-f44.google.com Received: from [209.85.216.44] ([209.85.216.44:48805] helo=mail-qa0-f44.google.com) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id 77/2B-35654-F57EFE25 for ; Mon, 03 Feb 2014 14:00:48 -0500 Received: by mail-qa0-f44.google.com with SMTP id w5so10819972qac.31 for ; Mon, 03 Feb 2014 11:00:45 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=w6AgOqrP1fDTpwUKdkWVZx29LLjFspfhSHghtXItueU=; b=05/9XTglIj9RD76EXF4MFKtWwZ3u01IX/WaCGH1DRgHvv4hFk0F40VVTpOGrFch6Tr RlbenfZ7VylTutXS+NeLPAUHDEv/2+UYV6LQgyR0ihnGWybPL5HpzlKc0GyUmnEXHIsr VRRYQssMNr38d2HHklpKeDSrKRbyagrdu8lwVnWbzaMsapnRwxqC1FZF6M1h7NlKMFli 4sMJQqGObQ9bFnejf5EXIC2K9cW53EdhJGT8HlZbpIPuinFDccbArgAnpZbVKJk8H5Wc 3CuTYoNKZEr18XkeA23rIClCNOMI6Dhr+DM8iHIj8KtGf1DbPeG0k2Q/TViwsJdk74Cl 8Bmg== MIME-Version: 1.0 X-Received: by 10.224.80.70 with SMTP id s6mr58788679qak.85.1391454044924; Mon, 03 Feb 2014 11:00:44 -0800 (PST) Received: by 10.140.96.70 with HTTP; Mon, 3 Feb 2014 11:00:44 -0800 (PST) In-Reply-To: References: Date: Mon, 3 Feb 2014 20:00:44 +0100 Message-ID: To: Pierre Joye Cc: Daniel Lowrey , "internals@lists.php.net" Content-Type: multipart/alternative; boundary=001a11c2d83e11b21804f1852451 Subject: Re: [PHP-DEV] Windows Peer Verification From: tyra3l@gmail.com (Ferenc Kovacs) --001a11c2d83e11b21804f1852451 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable On Mon, Feb 3, 2014 at 7:49 PM, Pierre Joye wrote: > On Mon, Feb 3, 2014 at 7:46 PM, Daniel Lowrey wrote: > > > The only real question here is this: > > > > ***** Should we ship a CA file? ***** > > > > Personally, I say no. If people are going to programmatically use > encrypted > > stream transfers they need to at the very least understand the basics o= f > the > > CA system. We shouldn't subsidize insecurity, and it's trivially easy t= o > > procure a CA file. > > We should for the windows binaries and use a script to update it. This > script should be part of the src distros. > > I have added the curl ca cert file option because many users requested > it. It is very handy to have the ability to get a uptodate certs file, > especially when the OS one is outdated and cannot be updated (yes, it > happens :). Hi Pierre, What made you change your mind about this since the discussion in december? http://grokbase.com/p/php/php-internals/13chgngwf2/php-dev-vote-tls-peer-ve= rification --=20 Ferenc Kov=C3=A1cs @Tyr43l - http://tyrael.hu --001a11c2d83e11b21804f1852451--