Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:94494
Return-Path: <yohgaki@ohgaki.net>
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Delivered-To: mailing list internals@lists.php.net
Received: (qmail 1493 invoked from network); 13 Jul 2016 01:49:54 -0000
Received: from unknown (HELO lists.php.net) (127.0.0.1)
  by localhost with SMTP; 13 Jul 2016 01:49:54 -0000
Authentication-Results: pb1.pair.com header.from=yohgaki@ohgaki.net; sender-id=pass
Authentication-Results: pb1.pair.com smtp.mail=yohgaki@ohgaki.net; spf=pass; sender-id=pass
Received-SPF: pass (pb1.pair.com: domain ohgaki.net designates 180.42.98.130 as permitted sender)
X-PHP-List-Original-Sender: yohgaki@ohgaki.net
X-Host-Fingerprint: 180.42.98.130 ns1.es-i.jp  
Received: from [180.42.98.130] ([180.42.98.130:39758] helo=es-i.jp)
	by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP
	id 53/8F-17655-F3E95875 for <internals@lists.php.net>; Tue, 12 Jul 2016 21:49:52 -0400
Received: (qmail 54297 invoked by uid 89); 13 Jul 2016 01:49:48 -0000
Received: from unknown (HELO mail-qt0-f171.google.com) (yohgaki@ohgaki.net@209.85.216.171)
  by 0 with ESMTPA; 13 Jul 2016 01:49:48 -0000
Received: by mail-qt0-f171.google.com with SMTP id u25so18266985qtb.1
        for <internals@lists.php.net>; Tue, 12 Jul 2016 18:49:47 -0700 (PDT)
X-Gm-Message-State: ALyK8tJ/Wpm8Vc45Mc+6HUkt8HtM4Td0QYBgHC9SqyPA5OCXRJPyhwd+wQJ7Rwb2GrMMNe5lYCT5x4LxMMdcgQ==
X-Received: by 10.200.33.172 with SMTP id 41mr8374877qty.26.1468374581676;
 Tue, 12 Jul 2016 18:49:41 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.140.17.33 with HTTP; Tue, 12 Jul 2016 18:49:02 -0700 (PDT)
In-Reply-To: <alpine.DEB.2.20.1607121124450.16349@whisky.home.derickrethans.nl>
References: <CAGa2bXaSkozJLLtycujwmHyas9TofRw5s6JzG0EQQvPyU0pxNQ@mail.gmail.com>
 <CAGa2bXYLuxq2Yywr_v4B5ExQ37bWE9Fc45KLNCcXVQS3d47_kA@mail.gmail.com> <alpine.DEB.2.20.1607121124450.16349@whisky.home.derickrethans.nl>
Date: Wed, 13 Jul 2016 10:49:02 +0900
X-Gmail-Original-Message-ID: <CAGa2bXZMFgzQNmkSWTMXpR7p49BF+J3xRw1B1n6gFxZDRdShLQ@mail.gmail.com>
Message-ID: <CAGa2bXZMFgzQNmkSWTMXpR7p49BF+J3xRw1B1n6gFxZDRdShLQ@mail.gmail.com>
To: Derick Rethans <derick@php.net>
Cc: "internals@lists.php.net" <internals@lists.php.net>
Content-Type: text/plain; charset=UTF-8
Subject: Re: [PHP-DEV] Re: [RFC][VOTE] Session ID without hashing
From: yohgaki@ohgaki.net (Yasuo Ohgaki)

Hi Derick,

On Tue, Jul 12, 2016 at 7:25 PM, Derick Rethans <derick@php.net> wrote:
> Hi,
>
> The voted-upon-RFC still has
>
>>     session.use_strict_mode (0 to 1) - Changed as insurance of broken PRNG implementation.
>
> Although you said:
>
>         It was moved to other RFC.
>
>         https://wiki.php.net/rfc/session-use-strict-mode
>
> And neither did you restart voting after modifying the RFC - or writing
> down in the RFC's changes that it got changed.
>
> So what's the deal?

session.use_strict_mode change in the patch is included by mistake.

Someone pointed it out immediately after starting vote, RFC does not refer
use_strice_mode change. I removed the change and extended vote period
a day.

RFC itself does not change (It didn't mention use_strict_mode change at all)
and I didn't get any comments on this, but now I got one.

Any suggestions?
Re-opening vote few days or a week is fine with me.

Regards,

--
Yasuo Ohgaki
yohgaki@ohgaki.net