Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:94669
Return-Path: <yohgaki@ohgaki.net>
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Delivered-To: mailing list internals@lists.php.net
Received: (qmail 78422 invoked from network); 24 Jul 2016 06:32:02 -0000
Received: from unknown (HELO lists.php.net) (127.0.0.1)
  by localhost with SMTP; 24 Jul 2016 06:32:02 -0000
Authentication-Results: pb1.pair.com smtp.mail=yohgaki@ohgaki.net; spf=pass; sender-id=pass
Authentication-Results: pb1.pair.com header.from=yohgaki@ohgaki.net; sender-id=pass
Received-SPF: pass (pb1.pair.com: domain ohgaki.net designates 180.42.98.130 as permitted sender)
X-PHP-List-Original-Sender: yohgaki@ohgaki.net
X-Host-Fingerprint: 180.42.98.130 ns1.es-i.jp  
Received: from [180.42.98.130] ([180.42.98.130:37388] helo=es-i.jp)
	by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP
	id 6B/3B-05797-ED064975 for <internals@lists.php.net>; Sun, 24 Jul 2016 02:32:00 -0400
Received: (qmail 57793 invoked by uid 89); 24 Jul 2016 06:31:55 -0000
Received: from unknown (HELO mail-qk0-f176.google.com) (yohgaki@ohgaki.net@209.85.220.176)
  by 0 with ESMTPA; 24 Jul 2016 06:31:55 -0000
Received: by mail-qk0-f176.google.com with SMTP id s63so133218385qkb.2
        for <internals@lists.php.net>; Sat, 23 Jul 2016 23:31:55 -0700 (PDT)
X-Gm-Message-State: AEkoouvXMBSVFnlGhuQ/2FVWnH8VwlX3vp1lsRXEibyoU5y02mxonQ/8UMKVfD9/IJoNGYW1oh9ILOAFw0tyJw==
X-Received: by 10.55.146.2 with SMTP id u2mr15725948qkd.20.1469341908567; Sat,
 23 Jul 2016 23:31:48 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.140.85.242 with HTTP; Sat, 23 Jul 2016 23:31:09 -0700 (PDT)
In-Reply-To: <CAGa2bXZn5HiOD6LsotYDmUJKhGxxpp0xTsMSE2bp5HO0fsCmtA@mail.gmail.com>
References: <CAGa2bXZn5HiOD6LsotYDmUJKhGxxpp0xTsMSE2bp5HO0fsCmtA@mail.gmail.com>
Date: Sun, 24 Jul 2016 15:31:09 +0900
X-Gmail-Original-Message-ID: <CAGa2bXb6YGDV0L1AkpuTirjeaxHLYjgw5KK1Vw0mdqE5Bwt5oA@mail.gmail.com>
Message-ID: <CAGa2bXb6YGDV0L1AkpuTirjeaxHLYjgw5KK1Vw0mdqE5Bwt5oA@mail.gmail.com>
To: "internals@lists.php.net" <internals@lists.php.net>
Content-Type: text/plain; charset=UTF-8
Subject: Re: [RFC][VOTE] Session ID without hashing - Reopened
From: yohgaki@ohgaki.net (Yasuo Ohgaki)

Hi all,

Old votes are removed. Everyone already have voted 1st vote should vote again!

https://wiki.php.net/rfc/session-id-without-hashing#vote

Sorry for the inconvenience & thank you for voting!

--
Yasuo Ohgaki
yohgaki@ohgaki.net


On Sun, Jul 24, 2016 at 1:50 PM, Yasuo Ohgaki <yohgaki@ohgaki.net> wrote:
> Hi all,
>
> Due to a defect in the RFC, vote is reopened for a week. Removed lines
> are indicated by <del></del>. No additional lines nor modifications
> other than removed lines for session.use_strict_mode change.
> Sorry for the confusion!
>
> ============
>
> Currently session module uses obsolete MD5 for session ID. With
> CSPRNG, hashing is redundant and needless. It adds hash module
> dependency and inefficient (There is no reason to use hash for CSPRNG
> generated bytes).
>
> This proposal cleans up session code by removing hash.
>
> https://wiki.php.net/rfc/session-id-without-hashing
>
> I set vote requires 2/3 support.
> Please describe the reason why when you against this RFC. Reasons are
> important for improvements!
>
> Thank you!
>
> --
> Yasuo Ohgaki
> yohgaki@ohgaki.net