Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:86369
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: error (pb1.pair.com: domain paragonie.com from 209.85.192.51 cause and error)
MIME-Version: 1.0
In-Reply-To: <555ECC25.1040304@php.net>
References: <CAKws9z0MVb8zAwmyW7ShkOjQOpJLEO_pdA=TnDT47nHa0x+wYQ@mail.gmail.com>
	<CAKs572WG7kPXShGCw-YO7ZujSXOeJEro5CZi+Xe7SoXoS03Dew@mail.gmail.com>
	<CAKs572VFFzSgAKX_iWHjRudqomJJ9dsQ_FdAvhHoGMXK-2jEzw@mail.gmail.com>
	<555ECC25.1040304@php.net>
Date: Sun, 24 May 2015 20:38:34 -0400
Message-ID: <CAKws9z3J3sPmPLWK_pGpj42PYorar2iX9nREKLeZXZrjrHe+kA@mail.gmail.com>
To: Michael Wallner <mike@php.net>
Cc: internals@lists.php.net
Content-Type: multipart/alternative; boundary=001a11466938d94d260516dd3aff
Subject: Re: Fwd: [PHP-DEV] [RFC] [PHP 7.1] libsodium
From: scott@paragonie.com (Scott Arciszewski)

--001a11466938d94d260516dd3aff
Content-Type: text/plain; charset=UTF-8

I don't think that's a good idea. There are already production systems that
call it like \Sodium::function_here().

I'm not an extension developer; I don't know what level of effort would
even be required to refactor it from a class with static methods to a
namespace with functions.

And when you consider the amount of effort you're asking the developers who
are already using the existing method, it doesn't seem worth it anyway.

What is your reason for wanting to change Sodium to a namespace and all
methods to functions? Especially as someone who, presumably, has never used
the library before.

Scott Arciszewski
Chief Development Officer
Paragon Initiative Enterprises <https://paragonie.com>

On Fri, May 22, 2015 at 2:26 AM, Michael Wallner <mike@php.net> wrote:

> On 21/05/15 09:49, Peter Petermann wrote:
> > Hi Scott,
> >
> > I personally think the RFC is a bit short,
> > also I just had a very brief look at the documentation of the
> extension in
> > question, and find its API a bit strange,
> > whats up with having everything in static method calls?
> >
> > regards,
> > PP
> >
> > 2015-05-21 3:15 GMT+02:00 Scott Arciszewski <scott@paragonie.com>:
> >
> >> The current state of cryptography in PHP is, well, abysmal. Our two main
> >> choices for handling symmetric cryptography are libmcrypt (collecting
> dust
> >> since 2007) and openssl, which lacks a streaming API (e.g.
> mcrypt_generic)
> >> and GCM support.
> >>
> >>
> >> I think now is a good time to talk about the possibility of making
> >> libsodium a core PHP extension, depending on where things are when we
> near
> >> the 7.1 feature freeze.
> >>
> >> I've just opened an RFC for precisely this purpose:
> >> https://wiki.php.net/rfc/libsodium
> >>
>
> Yes, the choice of API looks pretty awkward; if we could settle on
> PHP-5.6+, change Sodium to a namespace and all methods to functions
> therein.
>
> --
> Regards,
> Mike
>
> --
> PHP Internals - PHP Runtime Development Mailing List
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>

--001a11466938d94d260516dd3aff--