Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:82122
Return-Path: <pierre.php@gmail.com>
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Delivered-To: mailing list internals@lists.php.net
Received: (qmail 24759 invoked from network); 8 Feb 2015 06:51:55 -0000
Received: from unknown (HELO lists.php.net) (127.0.0.1)
  by localhost with SMTP; 8 Feb 2015 06:51:55 -0000
Authentication-Results: pb1.pair.com header.from=pierre.php@gmail.com; sender-id=pass
Authentication-Results: pb1.pair.com smtp.mail=pierre.php@gmail.com; spf=pass; sender-id=pass
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.216.171 as permitted sender)
X-PHP-List-Original-Sender: pierre.php@gmail.com
X-Host-Fingerprint: 209.85.216.171 mail-qc0-f171.google.com  
Received: from [209.85.216.171] ([209.85.216.171:45806] helo=mail-qc0-f171.google.com)
	by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP
	id 60/00-24707-A8707D45 for <internals@lists.php.net>; Sun, 08 Feb 2015 01:51:54 -0500
Received: by mail-qc0-f171.google.com with SMTP id s11so18271799qcv.2
        for <internals@lists.php.net>; Sat, 07 Feb 2015 22:51:51 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20120113;
        h=mime-version:in-reply-to:references:date:message-id:subject:from:to
         :cc:content-type;
        bh=OK5YgFa/mzlOrS7ie1E5c/ANajg7DxQCAMom1pLE274=;
        b=sUHdWf3JrmXYuxqOC7tR0i3A3arVxMDQm0hL9rAI8btaEw44wT5m0Z7BKZXSf8TWJO
         9ZTvUk3P2ySsxvr79G4cXFkjs4HD1PLzLG2fSO4QxTYidtYATJreFNxCHclxl3VE4XqO
         AwwyzPVBE7TiOzpdMX1/xnflplViaJzSnjDzwy9B1CZIPYAppqeeW/wupBN7fkMydIqM
         AOAbVKcrkUBOUd0KyubC3x0YjNEh2Km93k/aFEwFcoH6RNaYFsy6MoEny+Fsyau3g2Qy
         WWx2zYGhbW7dVDVxAPpYNOTUAdi84tABZKVoMLG8Jm7vTCuN3ii7cg8lAU91ulUaJ++Y
         MqVw==
MIME-Version: 1.0
X-Received: by 10.224.89.65 with SMTP id d1mr27580055qam.40.1423378311833;
 Sat, 07 Feb 2015 22:51:51 -0800 (PST)
Received: by 10.96.185.37 with HTTP; Sat, 7 Feb 2015 22:51:51 -0800 (PST)
In-Reply-To: <CAGa2bXZne+CcG3PV-_PNZHiCb=ew-JN9x0iPvFf1j7N5LTbvYQ@mail.gmail.com>
References: <D0FBCF22.5D217%fsb@thefsb.org>
	<CAGa2bXavqvp5St5in4ckWamVO8GcpkBqH2KOXATLkaFrQa7t0w@mail.gmail.com>
	<CAEZPtU4B=AHBq0x4z-dEB9CWKP3HxHEoePvUz86QrPEbuZVdzw@mail.gmail.com>
	<CAGa2bXZne+CcG3PV-_PNZHiCb=ew-JN9x0iPvFf1j7N5LTbvYQ@mail.gmail.com>
Date: Sun, 8 Feb 2015 13:51:51 +0700
Message-ID: <CAEZPtU7S8o5yG0vdiRwmwCf69A-s0rsdnEcrTdrJLy+cDck0xg@mail.gmail.com>
To: Yasuo Ohgaki <yohgaki@ohgaki.net>
Cc: Tom Worster <fsb@thefsb.org>, PHP internals <internals@lists.php.net>
Content-Type: text/plain; charset=UTF-8
Subject: Re: [PHP-DEV] Security changes in PHP 7
From: pierre.php@gmail.com (Pierre Joye)

On Sun, Feb 8, 2015 at 1:43 PM, Yasuo Ohgaki <yohgaki@ohgaki.net> wrote:
> Hi Pierre,
>
> On Sun, Feb 8, 2015 at 3:04 PM, Pierre Joye <pierre.php@gmail.com> wrote:
>>
>> On Feb 8, 2015 12:48 PM, "Yasuo Ohgaki" <yohgaki@ohgaki.net> wrote:
>>
>> >> 2. What's going to happen to mcrypt?
>> >>
>> >> I see the vote to excise it did not pass. Does this mean that (i.e.
>> >> imply that) PHP's plan is to keep a security lib that hasn't been
>> >> maintained for 8 years for the next 5+ years?
>> >
>> >
>> > Removed.
>> > Available as PECL module.
>> > Probably.
>>
>> Please check the RFC.
>>
>> It is not removed and unless some people changed their mind the horrible
>> scenario described here will happen. And it will be longer than 5 years.
>
>
> https://wiki.php.net/start#extmcrypt
>
> Voted +1

Not sure what this RFC is (did not dig the list as the link is wrong).
However the latest on the topic is here and it is does not look
remotely close to a approval:

https://wiki.php.net/rfc/removal_of_dead_sapis_and_exts