Re: [RFC][Accepted] Password Mechanism Registry
| From: | Nikita Popov | Date: | Thu, 12 Dec 2019 09:11:13 +0000 |
| Subject: | Re: [RFC][Accepted] Password Mechanism Registry | ||
| References: | 1 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-107910@lists.php.net to get a copy of this message | ||
On Tue, Nov 20, 2018 at 8:05 PM Sara Golemon <pollita@php.net> wrote:
> https://wiki.php.net/rfc/password_registry has been accepted
> unanimously 21:0 with the supplemental vote on maintaining BC for the
> integer based mechanism parameters passing 19:1.
>
> Implementation will be forthcoming.
>
> -Sara
>
Hey Sara,
After seeing
https://stackoverflow.com/questions/59273258/identifying-what-password-default-will-be-in-php-7-4,
I'm wondering what the rationale is for making PASSWORD_DEFAULT null,
rather than giving it the value of whatever PASSWORD_* is the default?
Checking PASSWORD_DEFAULT == PASSWORD_BCRYPT doesn't seem like an
unreasonable thing to do...
Nikita