Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:91872
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain devilix.net designates 209.85.218.51 as permitted sender)
MIME-Version: 1.0
In-Reply-To: <56F1A28F.90000@pascal-martin.fr>
References: <CAGa2bXZqCd4g5BwzRxWsVw351G_o1+AkhGq3cdyKhUW39rm4Tg@mail.gmail.com>
	<56F1A28F.90000@pascal-martin.fr>
Date: Tue, 22 Mar 2016 22:03:03 +0200
Message-ID: <CAPhkiZyn1hh_kdR5sMCxHSw+=kabiPerNT8Y3o8-h6u9d45wNA@mail.gmail.com>
To: "Pascal MARTIN, AFUP" <mailing@pascal-martin.fr>
Cc: "internals@lists.php.net" <internals@lists.php.net>
Content-Type: multipart/alternative; boundary=94eb2c0470ae722b68052ea8b37a
Subject: Re: [PHP-DEV] [RFC][VOTE] Precise session management
From: narf@devilix.net (Andrey Andreev)

--94eb2c0470ae722b68052ea8b37a
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Hi,

On Tue, Mar 22, 2016 at 9:52 PM, Pascal MARTIN, AFUP <
mailing@pascal-martin.fr> wrote:

> Le 09/03/2016 10:14, Yasuo Ohgaki a =C3=A9crit :
>
>> Vote starts 2016-03-09-09:00(UTC) and ends 2016-03-23-09:00(UTC)
>> https://wiki.php.net/rfc/precise_session_management#vote
>>
>
> Hi,
>
> At AFUP, we would be +1 on this RFC.
>
> Basically: better security and pretty-much no bc-break, is a good thing.
>
> Thanks for your work on this!
>

I respect your opinion in wanting to support the proposal, but "pretty much
no BC break"?

The RFC itself lists 7 points under "Backwards Incompatible Changes" and
there's at least one more in session_destroy() not deleting data
immediately.
It's also not hard to imagine a lot of BC breaks and other unadressed
problems in custom handlers passed to session_set_save_handler().

Cheers,
Andrey.

--94eb2c0470ae722b68052ea8b37a--