Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:91884 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 60830 invoked from network); 24 Mar 2016 02:40:07 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 24 Mar 2016 02:40:07 -0000 Authentication-Results: pb1.pair.com header.from=yohgaki@gmail.com; sender-id=pass Authentication-Results: pb1.pair.com smtp.mail=yohgaki@gmail.com; spf=pass; sender-id=pass Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.213.67 as permitted sender) X-PHP-List-Original-Sender: yohgaki@gmail.com X-Host-Fingerprint: 209.85.213.67 mail-vk0-f67.google.com Received: from [209.85.213.67] ([209.85.213.67:33028] helo=mail-vk0-f67.google.com) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id 45/33-36618-48353F65 for ; Wed, 23 Mar 2016 21:40:04 -0500 Received: by mail-vk0-f67.google.com with SMTP id a62so3197696vkh.0 for ; Wed, 23 Mar 2016 19:40:04 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to; bh=1L08/53SxtuZKOVbTTfbTfPJjij4FwSxddNf+cAoIbk=; b=JWJTQo+lzV1/WwMyF8PoDpsGJbn2ECvbG3xry7LtoeCS78IYJsOgb7vS9s5WPEPBSi y0rWjUIJME8UajrgyeRwOFqDGOwvoOmuFkAeR7A5DVRxdftGeBI07x2Apz9uFHFbohP8 7XuOs0JsujehzCDE7GI7JnZLHVvkrNTEFRDUUdPEANpDxlHicSeGKoj+rSP7RyhfDDaf S6CEgaicE02JyfdV7exS1oZS5k/Zzj+X0DF9DCQK+As5xIdlIPvnR4E5RuaYq7lFQ+4i z6+nqXryAmDdTwo0BHW4g8BthM+yx/Ia8RPPIP4855gTYNxAFBDHsebVDJxub3aJK7Rd wl6Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to; bh=1L08/53SxtuZKOVbTTfbTfPJjij4FwSxddNf+cAoIbk=; b=BDpPbaegzuceYz9BNoMvz+d83LiZUVVzH4V4IJhSuxKRRCFtA47+D149Tryx0U8QIx UkyF8SOKTr+JfKlRUKoDNx3YwEfdMQoKDNyoEHGAPpphkKhAjY1cxFdRVLZh7jXzo4zD OgrgdF7xfgOgspH1pJSU/QmoweyHlSYRwrwdYs/Ap/E59MBuBb801gl/v4xuWlJiAVEm +icetsuakLQxpYL/zF63vlHVYAVoy7qFbW7yR99gjt1GrebzJ6zPq9itKCxrADsdMlaV 3GGr47jz5D9Y+0lxv1rSfWP45hxSkq1BaTJItXVvoAxDePZTo7xx3/cgXnrZyenlOrXW 5z+w== X-Gm-Message-State: AD7BkJKhgfiRa2fxD8BUO3M3DiCqYON8GJsOuroZzSjRv1UZyfe2BUyoijFRyJEqJg7ICd8T3SV9NfCPwCfyIQ== X-Received: by 10.176.0.79 with SMTP id 73mr3378753uai.1.1458787201150; Wed, 23 Mar 2016 19:40:01 -0700 (PDT) MIME-Version: 1.0 Sender: yohgaki@gmail.com Received: by 10.176.68.69 with HTTP; Wed, 23 Mar 2016 19:39:21 -0700 (PDT) In-Reply-To: References: Date: Thu, 24 Mar 2016 11:39:21 +0900 X-Google-Sender-Auth: GfGqDuE9HdjMRivWvWtwfSLeXxk Message-ID: To: "internals@lists.php.net" Content-Type: text/plain; charset=UTF-8 Subject: Re: [RFC Discussion] Precise session management From: yohgaki@ohgaki.net (Yasuo Ohgaki) On Thu, Mar 24, 2016 at 11:26 AM, Yasuo Ohgaki wrote: > On Sun, Feb 14, 2016 at 9:49 AM, Yasuo Ohgaki wrote: >> It's been long time since the first proposal. Since session >> module is important module for Web apps, I would like to >> hear opinions for this RFC once again before vote. >> >> RFC >> https://wiki.php.net/rfc/precise_session_management >> >> PR >> https://github.com/php/php-src/pull/1734 >> >> Thank you. > > Vote is over and the result is 15 in favor and 11 against. > It's over half of votes, but I set 2/3 to pass, so we have to come up > to other solution for current session management problems. > > I'm looking forward to hear alternatives from people vote against this RFC. > > Issues are > - Prevent race conditions. > - Prevent session data from abuse. (Stolen session including forever) > > These are allowed with current session module. > > Thank you! I sent new mail for alternative implementation. Please comment to new thread. Thank you. -- Yasuo Ohgaki yohgaki@ohgaki.net