Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:73301
Return-Path: <yohgaki@gmail.com>
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Delivered-To: mailing list internals@lists.php.net
Received: (qmail 82244 invoked from network); 19 Mar 2014 10:29:18 -0000
Received: from unknown (HELO lists.php.net) (127.0.0.1)
  by localhost with SMTP; 19 Mar 2014 10:29:18 -0000
Authentication-Results: pb1.pair.com header.from=yohgaki@gmail.com; sender-id=pass
Authentication-Results: pb1.pair.com smtp.mail=yohgaki@gmail.com; spf=pass; sender-id=pass
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.217.170 as permitted sender)
X-PHP-List-Original-Sender: yohgaki@gmail.com
X-Host-Fingerprint: 209.85.217.170 mail-lb0-f170.google.com  
Received: from [209.85.217.170] ([209.85.217.170:63627] helo=mail-lb0-f170.google.com)
	by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP
	id D0/73-58554-C7179235 for <internals@lists.php.net>; Wed, 19 Mar 2014 05:29:17 -0500
Received: by mail-lb0-f170.google.com with SMTP id s7so5805577lbd.29
        for <internals@lists.php.net>; Wed, 19 Mar 2014 03:29:12 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20120113;
        h=mime-version:sender:in-reply-to:references:from:date:message-id
         :subject:to:cc:content-type;
        bh=I93ulmoCDXc9lSbdMLB4qvayEMCGMSe+HzEEe/rFWLM=;
        b=T4V3lqAy+WeVLxi80n4x4IUUYn740heTc4y1mQ0bmYd1jpP8j7nYOWswMKw9ojZx9C
         CCjLk7tV5AsTwhGnIksk7xjDg5C10kD1sIGadTkni2MCcH6A8axEEx9ZIPyhojvRniTr
         rHitb0EwSTv+x7CA8wxjhChdhX1CYQRsL2jmEVutawvFxVqaPrm6JEmgLUqu5qjMws3K
         8PgJbHnUeO4Nmx9JM8nJZqr58i+eTtuG24LJhkiYLV/1p/TXQnEf4WEVja3aqYhEx+0H
         NU0xJKJq8XYIPlmaNFcj7OzHh4u3Hd0iu3yK43lMHujtbT3craJOHOxlLQ40sxQhFQxK
         lTYg==
X-Received: by 10.112.204.9 with SMTP id ku9mr16332108lbc.31.1395224952799;
 Wed, 19 Mar 2014 03:29:12 -0700 (PDT)
MIME-Version: 1.0
Sender: yohgaki@gmail.com
Received: by 10.112.205.73 with HTTP; Wed, 19 Mar 2014 03:28:32 -0700 (PDT)
In-Reply-To: <CAH-PCH5Epq9SsArGFiGUfBWW-gfprhNYS1tQ=L4L+K9+OWaRfQ@mail.gmail.com>
References: <CAPhkiZz4bN8XQOtkeyXMArgdngHVjHY+0gf-Qnb9RY8xrxOZTg@mail.gmail.com>
 <CAGa2bXbF5ip_rzt+P3vc1ReEU-RoP5vGOnrTTDpTLeMGSLDrAg@mail.gmail.com>
 <CAPhkiZxAc_88dt469JuiAXrkRoDLfJ=Mtcasqr6vLcj_iDg1ig@mail.gmail.com>
 <CAGa2bXb5inv+aw8Y1502E+iHQautNggJaHj8RvqsAdo4MAgCDw@mail.gmail.com>
 <CAPhkiZxiXdHYo90cm=uZ+t2+DOuh9OWmkVNnnAGXC=TfznCvXw@mail.gmail.com>
 <CAGa2bXaU8g6eApd+u4G5LZCkBhR=Qt3NmL0gyGxxQztZr4gxvA@mail.gmail.com> <CAH-PCH5Epq9SsArGFiGUfBWW-gfprhNYS1tQ=L4L+K9+OWaRfQ@mail.gmail.com>
Date: Wed, 19 Mar 2014 19:28:32 +0900
X-Google-Sender-Auth: 6XFPWGuEdxXtVBnggQCOKaRa3kQ
Message-ID: <CAGa2bXbU5ArcgwkpoDOTzg_4Qg+4vq5ozipuViOFbPv-4sQckw@mail.gmail.com>
To: Ferenc Kovacs <tyra3l@gmail.com>
Cc: Andrey Andreev <narf@devilix.net>, "internals@lists.php.net" <internals@lists.php.net>
Content-Type: multipart/alternative; boundary=001a11c3dba8b185f804f4f31f70
Subject: Re: [PHP-DEV] Solution for session_regenerate_id() issues
From: yohgaki@ohgaki.net (Yasuo Ohgaki)

--001a11c3dba8b185f804f4f31f70
Content-Type: text/plain; charset=UTF-8

Hi Ferenc,

On Wed, Mar 19, 2014 at 7:12 PM, Ferenc Kovacs <tyra3l@gmail.com> wrote:

> >
>> > But speaking of sessions and security, I'll mail you privately about
>> > something because I didn't see an option in the bug reporting form to
>> > mark it as a private one.
>> >
>>
>> If you choose "security" bug type, it's hidden.
>>
>
> nope, security bug type only makes it send the bug mail to
> security@php.net, only private bugs are protected from public access.
> that is something really error-prone, so I remember some discussion about
> changing that, and making new security bugs to be private by default, but
> AFAIK we never implemented that.
>

It surprises me.
Thank you for your info.

--
Yasuo Ohgaki
yohgaki@ohgaki.net

--001a11c3dba8b185f804f4f31f70--