Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:72182
Return-Path: <pierre.php@gmail.com>
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Delivered-To: mailing list internals@lists.php.net
Received: (qmail 45907 invoked from network); 4 Feb 2014 08:00:15 -0000
Received: from unknown (HELO lists.php.net) (127.0.0.1)
  by localhost with SMTP; 4 Feb 2014 08:00:15 -0000
Authentication-Results: pb1.pair.com header.from=pierre.php@gmail.com; sender-id=pass
Authentication-Results: pb1.pair.com smtp.mail=pierre.php@gmail.com; spf=pass; sender-id=pass
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.216.172 as permitted sender)
X-PHP-List-Original-Sender: pierre.php@gmail.com
X-Host-Fingerprint: 209.85.216.172 mail-qc0-f172.google.com  
Received: from [209.85.216.172] ([209.85.216.172:54745] helo=mail-qc0-f172.google.com)
	by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP
	id 16/D6-09069-E0E90F25 for <internals@lists.php.net>; Tue, 04 Feb 2014 03:00:15 -0500
Received: by mail-qc0-f172.google.com with SMTP id c9so13170476qcz.31
        for <internals@lists.php.net>; Tue, 04 Feb 2014 00:00:12 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20120113;
        h=mime-version:in-reply-to:references:date:message-id:subject:from:to
         :cc:content-type;
        bh=bm74uX7v4hUIL/0ordAkuIpczgtBzqWfSlQz96fnhWI=;
        b=wkqWr6zSFELCkosnJTEVVytZwFBC4yHyknHzOnw1xF/nllzfsNQPCYxdzZHiU5jsg2
         IR1B2r5nuVO2GfSYBenBKWLcrkbUCIMYX0l5vC22tE1/WUcrDv1+lfsnLTZibahwkr1i
         LafcENWfnjYs+y7kttBR27mKEo0+v2JZW24oCp9KHZD0vEb6W5ZpCVv4RQ7QELoXn+lk
         PP4aOW/i6Rm2s9IjNMGkwLBuuZDhkFzAR6IMt0G9pUC1ffJtwvENGKlSKsjPrhUB2ktr
         EtElNLFwsbeXE5gYyQP1Ad5gyHtd22eZRsW7qk3IsJ5V70VMXWXgV0vVk8PGBs4iuVcZ
         p65w==
MIME-Version: 1.0
X-Received: by 10.224.98.212 with SMTP id r20mr64242426qan.0.1391500812463;
 Tue, 04 Feb 2014 00:00:12 -0800 (PST)
Received: by 10.140.18.129 with HTTP; Tue, 4 Feb 2014 00:00:12 -0800 (PST)
In-Reply-To: <52F09D64.9020803@lsces.co.uk>
References: <CAH8Mpn=Kw9CCmpiXm-UE2s=GKFroTGczTr=ENczuAeiTCH6QwQ@mail.gmail.com>
	<344075933.20140203143339@figureone.com>
	<CAH8MpnkuFDNzYi4enqqtQcmis08LyTWojV3DZrc_Mwim=aqvRQ@mail.gmail.com>
	<CAH8MpnnXag49Yw9yE2p=+h3X2caz6wwfiT8kLf8H_WxrwtjVNw@mail.gmail.com>
	<CAEZPtU7CciuHS+TDRKWZitBnmuGT3EN8wNmz=dXoP92g8Bs7mw@mail.gmail.com>
	<617796370.20140204005840@cypressintegrated.com>
	<CAEZPtU4Ed5ZM_5veS41u=O26UvXnYCGS=XSDWaHJ5+7fJ6=+fw@mail.gmail.com>
	<52F098F7.7000901@lsces.co.uk>
	<CAEZPtU68J_r-GnnwyS1KryLm7nzmxqLz9KKuiNZ1Ygc2Zag85w@mail.gmail.com>
	<52F09D64.9020803@lsces.co.uk>
Date: Tue, 4 Feb 2014 09:00:12 +0100
Message-ID: <CAEZPtU4n_WnZHvU1GhDwF0jQPHKt=F9mqrYZTh9=58mE9Wz1Nw@mail.gmail.com>
To: Lester Caine <lester@lsces.co.uk>
Cc: PHP internals <internals@lists.php.net>
Content-Type: text/plain; charset=UTF-8
Subject: Re: [PHP-DEV] Re: Windows Peer Verification
From: pierre.php@gmail.com (Pierre Joye)

On Tue, Feb 4, 2014 at 8:57 AM, Lester Caine <lester@lsces.co.uk> wrote:
> Pierre Joye wrote:
>>>
>>> Security is not the
>>> >only thing that is reliant nowadays on third party data?
>>
>> We bundle the TZ data and it is used on all supported platforms. So
>> no, no platform lags behind other. Some distributions may patch the
>> date extension to use the system TZ but then it is none of our
>> business.
>
>
> But that is the whole point here ... it's the same argument with CA file?

If someone distributes a patched PHP, it is none of our business.

And CA file on Windows is not the same issue as Windows do not have
system CA files compatible with OpenSSL. Implementing a backend using
windows keys store and SSL APIs would bring more issues and
incompatibilities (user lever) than asking users to set an ini
setting.