Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:99900
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.128.182 as permitted sender)
MIME-Version: 1.0
In-Reply-To: <2b801df9-682a-5013-3fd8-d420212c2073@rhsoft.net>
References: <14052ebf-efea-cb43-39e0-bdc30e493ff3@genkgo.nl>
 <CADyq6s+mNc9AwdM-5_6AXez_K-UTbOFYsviVgYgLnK9moM3GwA@mail.gmail.com> <2b801df9-682a-5013-3fd8-d420212c2073@rhsoft.net>
Date: Tue, 18 Jul 2017 16:00:07 +0200
Message-ID: <CADyq6s+d8+2THz-XrYid=g3twz0Fmnye6FVURHE=z7dnHwp0dw@mail.gmail.com>
To: "lists@rhsoft.net" <lists@rhsoft.net>
Cc: PHP Internals List <internals@lists.php.net>
Content-Type: multipart/alternative; boundary="001a11442fce093e52055497f02e"
Subject: Re: [PHP-DEV] [RFC] samesite cookie implementation
From: ocramius@gmail.com (Marco Pivetta)

--001a11442fce093e52055497f02e
Content-Type: text/plain; charset="UTF-8"

On Tue, Jul 18, 2017 at 3:50 PM, lists@rhsoft.net <lists@rhsoft.net> wrote:

> i don't share your optinion, especially talking about 'should be
> deprecated' where i get the feeling some peoples hobby is deprecate working
> things
>
> comparing cookie params with encryption is hopefully just kidding
>

It could be a "hello world" function - same stuff.

Also, yes, cookies are as security-sensitive stuff as crypto, if not often
more (since crypto is usually handled at webserver level, and direct usage
of openssl is more "rare")

Marco Pivetta

http://twitter.com/Ocramius

http://ocramius.github.com/

--001a11442fce093e52055497f02e--