Re: Password Digest Registry
| From: | Nicolas Grekas | Date: | Thu, 18 Oct 2018 14:02:43 +0000 |
| Subject: | Re: Password Digest Registry | ||
| References: | 1 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-103327@lists.php.net to get a copy of this message | ||
>
> Opening https://wiki.php.net/rfc/password_registry for
> discussion.
>
Should the registry support password hashing mechanisms defined in script
> code? (I don't think so, but feel free to disagree)
>
Not for disagreeing but for the discussion: allowing userland to provide
algos would allow providing polyfills. This is proven useful already (see
https://github.com/symfony/polyfill/)
Of course, a userland algo should not be allowed to replace an existing
algo.
Nicolas