Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:90460
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: error (pb1.pair.com: domain paragonie.com from 209.85.215.49 cause and error)
MIME-Version: 1.0
In-Reply-To: <5692BC8F.4030503@thefsb.org>
References: <CAKws9z1g24rD=t92+9xKtO=3PuwQ3_N=L36gmVMqCC84CoqipQ@mail.gmail.com>
	<CAEZPtU7-Lk=jGsTQgRZOvBpcPPgdX3V-23=3_k9CXbmxU77V1A@mail.gmail.com>
	<CAKws9z248Kj=0qTLPZik0Ki1_zGPq+4fr6HQi_keeVCso1S4eQ@mail.gmail.com>
	<CAEZPtU7NpPWn0MsXjbFw9gNvRxm98XkHFk=RvQ1v0hRqcdGS3w@mail.gmail.com>
	<5692BC8F.4030503@thefsb.org>
Date: Sun, 10 Jan 2016 15:39:17 -0500
Message-ID: <CAKws9z2KirJremaN56qS4u=okjtnWKzTkMSBBWoZbxm0LurDig@mail.gmail.com>
To: Tom Worster <fsb@thefsb.org>
Cc: Pierre Joye <pierre.php@gmail.com>, PHP Internals <internals@lists.php.net>
Content-Type: text/plain; charset=UTF-8
Subject: Re: [PHP-DEV] [RFC] Libsodium
From: scott@paragonie.com (Scott Arciszewski)

On Sun, Jan 10, 2016 at 3:18 PM, Tom Worster <fsb@thefsb.org> wrote:
> On 1/7/16 11:24 AM, Pierre Joye wrote:
>>
>> What I do not like too much is the addition of an extension with
>> (relatively) low level functions for one specific library. It does not
>> really matter how good is this specific library, I simply do not see
>> such addition as a good strategic move.
>
>
> I also worry that it's yet another thing to maintain. The more API you offer
> to the PHP programmer, the more responsibility you take on.
>
> Tom

Except two things:

1. I'm trying to get rid of mcrypt, bringing the net change of
cryptography libraries to maintain to 0, but still improving the
cryptography library availability significantly.
2. I'm willing to maintain it, so you're gaining manpower with this change.

I'd argue that, strategically, what I've proposed across several RFCs
is superior to maintaining the status quo.

Scott Arciszewski
Chief Development Officer
Paragon Initiative Enterprises <https://paragonie.com>