Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:93795 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 50639 invoked from network); 5 Jun 2016 06:20:40 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 5 Jun 2016 06:20:40 -0000 Authentication-Results: pb1.pair.com header.from=pierre.php@gmail.com; sender-id=pass Authentication-Results: pb1.pair.com smtp.mail=pierre.php@gmail.com; spf=pass; sender-id=pass Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.218.43 as permitted sender) X-PHP-List-Original-Sender: pierre.php@gmail.com X-Host-Fingerprint: 209.85.218.43 mail-oi0-f43.google.com Received: from [209.85.218.43] ([209.85.218.43:34769] helo=mail-oi0-f43.google.com) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id BB/21-29296-7B4C3575 for ; Sun, 05 Jun 2016 02:20:39 -0400 Received: by mail-oi0-f43.google.com with SMTP id e72so184220118oib.1 for ; Sat, 04 Jun 2016 23:20:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc; bh=xsPtZ9IwtvS6rdwDOeSOqoZPyNVEpxh4tWRIuOWmclM=; b=HGNyf2EvRWZDqE6gB7u8gaO7Ve/mK3bJ6a20XL4Wajl6upx0/YIeTZO9W7LmIdOJdb 93HnLibHovSBVklsJ6BW+sJnzW4rm9BvpzuEUXfiBJy3BMV9/EV0lTsjR1uxZAfXWZiG oJEUcWF0YYwi1BcQ33vN3HPd80Wn3bKtd8TyI/EU1Euo8lHoWjMJTIgeyDnxk3gGCJh8 aZGrZ+8RFCO+um7syNip/Eti8SA52Ruo+jtq8g1OdBDeMgFzeXWB51B4yuVx59CGbjve mIxGBV6ljkNQKQ7430BnzjShtYmdN8RUlTlYiYpVrl+0XpBETfcvzOK31NDb05VOJaS/ pOBQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc; bh=xsPtZ9IwtvS6rdwDOeSOqoZPyNVEpxh4tWRIuOWmclM=; b=TwLK3Pq2C32EOWvRmYbSAiKkuQhZTUKawpsJk23drUCplnDaZ0mKPZ/lhMTR0uwo9G jaFIaPX/OZAqGrd7URfULaT/x88r+tTPnEvDTXf8a0GReJ9tJ9RVq8YBvjv1Q5UEWG/y Fbq+/qI0aGeRdYpebNrIYn0OdC8AvGW8Zy0KltiMQDj+h4RUBEoc7uEU+4VYHq9Ti75A bLCIgxrn1Mnw9nJUVYgf44tizOEjQhR8wm21AyKHfno1GjWKYy3NadDd5rgIKQiFo/Hf r6nR0fx+WPk/9wIkK2F3s7vuKTNiIBeRe2bkorHU7YSXjDWQHQLkR9T7qBGlKoolyLPQ o/SA== X-Gm-Message-State: ALyK8tJgLqofNSl8oBPfv/HpQ1JJFHHU/OR6zVGhOvasQTwgzxHknFP0iGY1KZ8XoWkGcCTPJFLYmEjMbwlqQA== MIME-Version: 1.0 X-Received: by 10.202.104.214 with SMTP id o83mr2521956oik.200.1465107635308; Sat, 04 Jun 2016 23:20:35 -0700 (PDT) Received: by 10.202.108.197 with HTTP; Sat, 4 Jun 2016 23:20:35 -0700 (PDT) Received: by 10.202.108.197 with HTTP; Sat, 4 Jun 2016 23:20:35 -0700 (PDT) In-Reply-To: References: Date: Sun, 5 Jun 2016 13:20:35 +0700 Message-ID: To: Stas Malyshev , PHP internals Cc: Scott Arciszewski Content-Type: multipart/alternative; boundary=001a1140afba293659053481f46e Subject: Re: [PHP-DEV] [RFC] Libsodium - Discussion From: pierre.php@gmail.com (Pierre Joye) --001a1140afba293659053481f46e Content-Type: text/plain; charset=UTF-8 On Jun 5, 2016 5:15 AM, "Stanislav Malyshev" wrote: > > The stated goal is "You shouldn't need a Ph.D in Applied Cryptography to > build a secure web application." I fully agree with this goal. I however > feel that current implementation, while making admirable progress > towards this goal, still needs some work to actually achieve it. I fully agree with you. As much as I think we need something like that, I think these are stopping points. I would very interested to hear from Scott about these questions and the low level nature of the APIs make it not as friendly or future proof as it could. Cheers Pierre --001a1140afba293659053481f46e--