Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:72401 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 77739 invoked from network); 8 Feb 2014 13:03:10 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 8 Feb 2014 13:03:10 -0000 Authentication-Results: pb1.pair.com header.from=ajf@ajf.me; sender-id=pass Authentication-Results: pb1.pair.com smtp.mail=ajf@ajf.me; spf=pass; sender-id=pass Received-SPF: pass (pb1.pair.com: domain ajf.me designates 198.187.29.241 as permitted sender) X-PHP-List-Original-Sender: ajf@ajf.me X-Host-Fingerprint: 198.187.29.241 imap3-1.ox.registrar-servers.com Received: from [198.187.29.241] ([198.187.29.241:40015] helo=imap3-1.ox.registrar-servers.com) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id 3B/B1-65299-D0B26F25 for ; Sat, 08 Feb 2014 08:03:10 -0500 Received: from localhost (localhost [127.0.0.1]) by oxmail.registrar-servers.com (Postfix) with ESMTP id 90D6F2A011B; Sat, 8 Feb 2014 08:03:07 -0500 (EST) X-Virus-Scanned: Debian amavisd-new at imap3.ox.registrar-servers.com Received: from oxmail.registrar-servers.com ([127.0.0.1]) by localhost (imap3.ox.registrar-servers.com [127.0.0.1]) (amavisd-new, port 10024) with LMTP id afDCdUDN2f56; Sat, 8 Feb 2014 08:03:07 -0500 (EST) Received: from [192.168.0.200] (unknown [176.25.177.94]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by oxmail.registrar-servers.com (Postfix) with ESMTPSA id 22E202A0127; Sat, 8 Feb 2014 08:03:05 -0500 (EST) Message-ID: <52F62B08.6050201@ajf.me> Date: Sat, 08 Feb 2014 13:03:04 +0000 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.2.0 MIME-Version: 1.0 To: Nikita Popov , Lester Caine CC: PHP internals References: <52F61A78.1020401@lsces.co.uk> In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Subject: Re: [PHP-DEV] Security Diligence From: ajf@ajf.me (Andrea Faulds) On 08/02/14 12:08, Nikita Popov wrote: > I'm sorry, but how does this relate to the internals mailing list? I might be reading it wrong, but I think Lester's saying "don't change PHP in ways that force people to make their code secure, because it doesn't matter if *my* code's insecure". -- Andrea Faulds http://ajf.me/