Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:82121
Return-Path: <yohgaki@gmail.com>
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Delivered-To: mailing list internals@lists.php.net
Received: (qmail 22803 invoked from network); 8 Feb 2015 06:44:17 -0000
Received: from unknown (HELO lists.php.net) (127.0.0.1)
  by localhost with SMTP; 8 Feb 2015 06:44:17 -0000
Authentication-Results: pb1.pair.com header.from=yohgaki@gmail.com; sender-id=pass
Authentication-Results: pb1.pair.com smtp.mail=yohgaki@gmail.com; spf=pass; sender-id=pass
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.192.47 as permitted sender)
X-PHP-List-Original-Sender: yohgaki@gmail.com
X-Host-Fingerprint: 209.85.192.47 mail-qg0-f47.google.com  
Received: from [209.85.192.47] ([209.85.192.47:45707] helo=mail-qg0-f47.google.com)
	by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP
	id 09/68-07765-0C507D45 for <internals@lists.php.net>; Sun, 08 Feb 2015 01:44:16 -0500
Received: by mail-qg0-f47.google.com with SMTP id q107so1907126qgd.6
        for <internals@lists.php.net>; Sat, 07 Feb 2015 22:44:13 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20120113;
        h=mime-version:sender:in-reply-to:references:from:date:message-id
         :subject:to:cc:content-type;
        bh=srbCrNyjBDOaI50vFEV+qJUAG6BSVo0z0orCWH1w8Tk=;
        b=CbnMby4uiJ6IIMhtH78B0c+plHsvSeMTltBb7Kbv1jL5mYhlUXJ9++GfcxbvjxvBHL
         i36asfJ+F/uNJtSgoOOlHeWdoW92Zirys7a0pGcYaT5kaWcg8lw0Olj7IRshGlnr/LGD
         E72b0a8Tnmbd2FyHAKyQpMIx0e1rJE9H9GB0JL81e/CPjnEBkmMLgi8IGNo04eVOoHoC
         UbyUo9+RAQvsM39PvqoljNzQYs8X1Wk+nLwlpG+Zc8u2Q036mcfio//I7O0vWfc6Zrkp
         q7tUYB/Uaxkf2tmOz+bfeuB/IZC0ltU6OoJnw5ZkyyZ6BNVe1nDWfVtLucH0uhKZAArY
         ugNA==
X-Received: by 10.140.109.164 with SMTP id l33mr25991116qgf.91.1423377853522;
 Sat, 07 Feb 2015 22:44:13 -0800 (PST)
MIME-Version: 1.0
Sender: yohgaki@gmail.com
Received: by 10.229.28.72 with HTTP; Sat, 7 Feb 2015 22:43:33 -0800 (PST)
In-Reply-To: <CAEZPtU4B=AHBq0x4z-dEB9CWKP3HxHEoePvUz86QrPEbuZVdzw@mail.gmail.com>
References: <D0FBCF22.5D217%fsb@thefsb.org> <CAGa2bXavqvp5St5in4ckWamVO8GcpkBqH2KOXATLkaFrQa7t0w@mail.gmail.com>
 <CAEZPtU4B=AHBq0x4z-dEB9CWKP3HxHEoePvUz86QrPEbuZVdzw@mail.gmail.com>
Date: Sun, 8 Feb 2015 15:43:33 +0900
X-Google-Sender-Auth: GvGIoZs5GffzDRYQE8WDTtO1ioI
Message-ID: <CAGa2bXZne+CcG3PV-_PNZHiCb=ew-JN9x0iPvFf1j7N5LTbvYQ@mail.gmail.com>
To: Pierre Joye <pierre.php@gmail.com>
Cc: Tom Worster <fsb@thefsb.org>, PHP internals <internals@lists.php.net>
Content-Type: multipart/alternative; boundary=001a113a304e572858050e8dfbc7
Subject: Re: [PHP-DEV] Security changes in PHP 7
From: yohgaki@ohgaki.net (Yasuo Ohgaki)

--001a113a304e572858050e8dfbc7
Content-Type: text/plain; charset=UTF-8

Hi Pierre,

On Sun, Feb 8, 2015 at 3:04 PM, Pierre Joye <pierre.php@gmail.com> wrote:

> On Feb 8, 2015 12:48 PM, "Yasuo Ohgaki" <yohgaki@ohgaki.net> wrote:
>
> >> 2. What's going to happen to mcrypt?
> >>
> >> I see the vote to excise it did not pass. Does this mean that (i.e.
> >> imply that) PHP's plan is to keep a security lib that hasn't been
> >> maintained for 8 years for the next 5+ years?
> >
> >
> > Removed.
> > Available as PECL module.
> > Probably.
>
> Please check the RFC.
>
> It is not removed and unless some people changed their mind the horrible
> scenario described here will happen. And it will be longer than 5 years.
>

https://wiki.php.net/start#extmcrypt

Voted +1

--
Yasuo Ohgaki
yohgaki@ohgaki.net

--001a113a304e572858050e8dfbc7--