Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:89054
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain sammykmedia.com designates 209.85.212.178 as permitted sender)
MIME-Version: 1.0
Sender: sammyk@sammykmedia.com
In-Reply-To: <D25BD98B.671B4%fsb@thefsb.org>
References: <CAPwsocFbM1wYzNni_M02Vd4m4giVeH36RH8uhWfC-uk_uaSqNw@mail.gmail.com>
	<563638C6.3010304@thefsb.org>
	<CAPwsocH6by-g5ZmbQZC1q5gZUovF5JNkCyUQg8hFtpDEPBm=6A@mail.gmail.com>
	<D25BD98B.671B4%fsb@thefsb.org>
Date: Tue, 3 Nov 2015 11:39:22 -0600
Message-ID: <CALYT1Yr8NiJ-7xx7oWBREcqMrimoCoy=PEVCxuW7zf5Vv7Nw9Q@mail.gmail.com>
To: Tom Worster <fsb@thefsb.org>
Cc: Leigh <leight@gmail.com>, PHP Internals <internals@lists.php.net>
Content-Type: multipart/alternative; boundary=047d7b4724e0c885420523a65f7a
Subject: Re: [PHP-DEV] Re: Make sessions use php_random_bytes in 7.1
From: me@sammyk.me (Sammy Kaye Powers)

--047d7b4724e0c885420523a65f7a
Content-Type: text/plain; charset=UTF-8

On Sun, Nov 1, 2015 at 2:02 PM, Tom Worster <fsb@thefsb.org> wrote:

> On 11/1/15, 12:40 PM, "Leigh" <leight@gmail.com> wrote:
>
> >On 1 November 2015 at 16:07, Tom Worster <fsb@thefsb.org> wrote:
> >
> >
> >I don't have one.
> >
> >But if I may ask, I'm curious, as always: What happens in the case that
> >php_random_bytes() fails?
> >
> >Tom
> >
> >
> >That's a good point.
> >
> >session_start() would throw the exception generated by php_random_bytes()
> >letting you know your system is incapable of generating high quality
> >random numbers.
>
> I think that's entirely satisfactory.
>
>
>
> >However this is a serious issue in it's own right, the APIs used (and the
> >way they are used) really only fail if the underlying environment is
> >fubar.
>
> Agreed.
>
> Tom
>
>
>
> --
> PHP Internals - PHP Runtime Development Mailing List
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>
I'm very much +1 on this and willing to help if you need some extra hands.
:)

--047d7b4724e0c885420523a65f7a--