Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:94024 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 78037 invoked from network); 15 Jun 2016 19:31:41 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 15 Jun 2016 19:31:41 -0000 Authentication-Results: pb1.pair.com header.from=me@kelunik.com; sender-id=unknown Authentication-Results: pb1.pair.com smtp.mail=me@kelunik.com; spf=permerror; sender-id=unknown Received-SPF: error (pb1.pair.com: domain kelunik.com from 81.169.146.219 cause and error) X-PHP-List-Original-Sender: me@kelunik.com X-Host-Fingerprint: 81.169.146.219 mo4-p00-ob.smtp.rzone.de Received: from [81.169.146.219] ([81.169.146.219:30618] helo=mo4-p00-ob.smtp.rzone.de) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id E0/70-10183-C1DA1675 for ; Wed, 15 Jun 2016 15:31:41 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; t=1466019097; l=5156; s=domk; d=kelunik.com; h=Content-Type:To:Subject:Date:From:In-Reply-To:References: MIME-Version; bh=ixRefXLDis6b1ZBdQQ4vx6Ao8iTMkY6dcxFHupta6mA=; b=fmZhA7OU0s8WDIoTLzS1SMIuwj04OaKpYngJn7utWxAlqzm0T6+VtjyimNdVbv2TykY iGQcogu2kaAa4lIEwMH744JaGbi5thvB0Uv7VQx3YhtV32xtKLlK0CwyKN2JwKL/ANzVm JkYR5baCYJryDCGIyZx+XrPYliQbls7jKpo= X-RZG-AUTH: :IWkkfkWkbvHsXQGmRYmUo9mls2vWuiu+7SLDup6E67mzuoBMBqD/tkA= X-RZG-CLASS-ID: mo00 Received: from mail-io0-f176.google.com ([209.85.223.176]) by smtp.strato.de (RZmta 38.5 AUTH) with ESMTPSA id e01b2ds5FJVb64y (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (curve secp384r1 with 384 ECDH bits, eq. 7680 bits RSA)) (Client did not present a certificate) for ; Wed, 15 Jun 2016 21:31:37 +0200 (CEST) Received: by mail-io0-f176.google.com with SMTP id n127so30488228iof.3 for ; Wed, 15 Jun 2016 12:31:37 -0700 (PDT) X-Gm-Message-State: ALyK8tJrjP07USiipkkqCpsZG+9Z2lADgbpNLUPzIs9f0G3jTlZ9LSOD0CWsXz2XLfSdJTmh4K4ZUPpgI3Su5Q== X-Received: by 10.107.181.75 with SMTP id e72mr1982980iof.88.1466019097002; Wed, 15 Jun 2016 12:31:37 -0700 (PDT) MIME-Version: 1.0 References: <1ee34970-76f4-e6c6-df1e-a827e3fc592d@fleshgrinder.com> <25bb59bb-d9ac-5ab3-f0bb-d80e6b3fe745@fleshgrinder.com> In-Reply-To: <25bb59bb-d9ac-5ab3-f0bb-d80e6b3fe745@fleshgrinder.com> Date: Wed, 15 Jun 2016 19:31:27 +0000 X-Gmail-Original-Message-ID: Message-ID: To: internals@lists.php.net, Tom Worster , Christoph Becker , Leigh , Jordi Boggiano , Pierre Joye , Yasuo Ohgaki Content-Type: multipart/alternative; boundary=001a1144577e82d3bf0535562b11 Subject: Re: [PHP-DEV] [RFC] RNG fixes From: me@kelunik.com (Niklas Keller) --001a1144577e82d3bf0535562b11 Content-Type: text/plain; charset=UTF-8 Fleshgrinder schrieb am Mi., 15. Juni 2016, 19:55: > On 6/15/2016 1:30 AM, Tom Worster wrote: > > On 6/14/16 3:12 PM, Fleshgrinder wrote: > > > >> Call me ignorant but is this required in typical web applications? > > > > PHP is used for various things, not just web apps. I use it for various > > other things because its the language in which I am most fluent. > > > > > PHP is and should remain: a pragmatic web-focused language > > > > --- Rasmus Lerdorf > > Please do not ignore our mission statement here. PHP is not a general > purpose language and even real general purpose languages do not offer > predictable RNGs. > Quoting from PHP.net: PHP is a popular general-purpose scripting language that is especially suited to web development. On 6/15/2016 1:30 AM, Tom Worster wrote: > > And the requirements of *typical* apps using PHP should not be the basis > > for removing functions that are in fact used in existing programs. > > > > Moving to PECL is not considered a BC and people are easily able to get > the functions back in if they really need to. > > On 6/15/2016 1:30 AM, Tom Worster wrote: > > It's possible to change programs so they don't use mt_rand() etc. but > > most people won't thank you for forcing them to rewrite software that > > works. > > > > The applications and libraries who are using it incorrectly right now > will thank us for making it harder to use the language incorrectly. > > On 6/15/2016 1:30 AM, Tom Worster wrote: > > Leigh, iiuc, is trying to fix bugs. Let's not change the discussion to > > cleaning up PHP's API. > > > > This is not what my proposal is about. I would move all the broken and > weak stuff to PECL and offer the already existing good alternatives to > the developers. At the same time we are able to fix the problems in the > PECL modules and release a new major version of those packages. > > We do not need to fix password_hash() nor random_int() since they work > and they are what is needed in a web-focused language. > > -- > Richard "Fleshgrinder" Fussenegger > > --001a1144577e82d3bf0535562b11--