Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:99399 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 5661 invoked from network); 6 Jun 2017 12:56:52 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 6 Jun 2017 12:56:52 -0000 Authentication-Results: pb1.pair.com smtp.mail=php@golemon.com; spf=softfail; sender-id=softfail Authentication-Results: pb1.pair.com header.from=php@golemon.com; sender-id=softfail Received-SPF: softfail (pb1.pair.com: domain golemon.com does not designate 209.85.128.170 as permitted sender) X-PHP-List-Original-Sender: php@golemon.com X-Host-Fingerprint: 209.85.128.170 mail-wr0-f170.google.com Received: from [209.85.128.170] ([209.85.128.170:32826] helo=mail-wr0-f170.google.com) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id 2F/EE-27119-196A6395 for ; Tue, 06 Jun 2017 08:56:50 -0400 Received: by mail-wr0-f170.google.com with SMTP id v104so53817666wrb.0 for ; Tue, 06 Jun 2017 05:56:49 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=golemon-com.20150623.gappssmtp.com; s=20150623; h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc:content-transfer-encoding; bh=bojRMaR5GOoRzG9yf2kgHH7cx1vxJtMS4MfSmKtClCM=; b=0HoK9M89PlZVn+6mbEr/hmtIiHt0Q7kODR1BPiKzYBykpB6V/KosMCuBjBS43ItGdG lCFkpujWOOHXWxwnn1qDGxz72ghgnYxW8KoTmDLZ2cjLn4gmZT2tg0CC9cv5qiXFqt98 /RCNT4ir9X/6r+UkslAcEi/EVi0sIYXpwb20vaQf8plfWE6xMG2SUggmqrupCxvaldTY hzarY8ScpTXW3ShOwf02IGjfbzBqlYV1PkWNJZ4eGpunkZZ6YUflLmgW2ypi/mru7llF Yh/sM89PA3yL1dQKtvvCJitxdcNQiaS1ehoMOfoe/lJWm76+mN4Plu9oiJcx9yoCVTxr CfZA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc:content-transfer-encoding; bh=bojRMaR5GOoRzG9yf2kgHH7cx1vxJtMS4MfSmKtClCM=; b=V56h89JH6RpD/5EJEDRUsPf530u5bEdHROjbZjjMkF2VqZCWTkWiCxT6Wn5VxubXUf H4asfjQ50nNb//Vjsii2W18e5U2Nu65Sj9lYaVoKOSzH0mtIshkvSQ6GYGJCLvRC9PHT xxpT8lRlGdTIeBvsLecxywbnorrgFB1fyAFs0MWL6dNYvDQ+a4CT9fzG6pubEw9/gPDT NHMSoAcc7wgnbGeNicIep/kSiCe12xVfL+36xQHvzN9OKCfdDMSnv6vQ0nr7VwkIFdq1 2kHLaL1bm3q6TwUOdefsVr9Hc2IXzgPmvrxriri2+kEBck120HfxCkbrSSLM78nARbwl P6kQ== X-Gm-Message-State: AODbwcDZjrhL3cCrskh7beWuse/d9HuXyKiFlq70t+ugNklsOVekQvdZ K80zhCP+607Nyyn5e95BdMU7Q2Zs4rzz X-Received: by 10.223.132.39 with SMTP id 36mr17177813wrf.179.1496753806181; Tue, 06 Jun 2017 05:56:46 -0700 (PDT) MIME-Version: 1.0 Sender: php@golemon.com Received: by 10.223.169.209 with HTTP; Tue, 6 Jun 2017 05:56:45 -0700 (PDT) X-Originating-IP: [74.113.166.198] In-Reply-To: <308f6656-ecab-a5ea-f182-73b4046a25a1@fedoraproject.org> References: <308f6656-ecab-a5ea-f182-73b4046a25a1@fedoraproject.org> Date: Tue, 6 Jun 2017 08:56:45 -0400 X-Google-Sender-Auth: fX4CWxeLGf4cF7F6D2576uG9V5c Message-ID: To: Remi Collet Cc: PHP internals Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Subject: Re: [PHP-DEV] [RFC][Release Process] Deprecate/Remove MD5 checksums From: pollita@php.net (Sara Golemon) On Tue, Jun 6, 2017 at 12:52 AM, Remi Collet wrote= : > Le 30/05/2017 =C3=A0 06:27, Sara Golemon a =C3=A9crit : >> https://wiki.php.net/rfc/release-md5-deprecation >> >> Primary discussion points: Deprecate or Remove? Deprecate for how long? >> > > +1 for dropping md5 checksums for 7.2 releases > > And I don't think adding sha256 for old releases (which are unsecure) > worth the work. > Too late: https://github.com/php/web-php/commit/c9224979fe2c56cda84cca664b7= eed34df79e16d I also added a few more commits to account for some places where we're assuming an md5 checksum will be present. -Sara