Re: Plan regarding RC4

From:	Zeev Suraski	Date:	Tue, 20 May 2003 18:44:33 +0000
Subject:	Re: Plan regarding RC4
References:	1 2 3 4 5 6 7 8 9	Groups:	php.internals
Request:	Send a blank email to internals+get-1818@lists.php.net to get a copy of this message

At 21:36 20/05/2003, Sascha Schumann wrote:

    My point is that _all_ areas of the patch are extremely
    well tested as of today.  The two (not three) issues which
    occured so far were in areas which initially received less
    testing.  And that has been rectified.

    Now, if there is a majority against the patch, I will gladly
    remove it and simply maintain it for my own personal
    projects and interested commercial parties.

I don't think there's majority against this patch. I, for one, am not against it, I think it's good. I'm against putting it in v4.3.2 because it's bad risk management in my opinion. Providing it separately as a patch on php.net for interested parties, and maybe releasing 4.4.0 based on it after it gets some more testing, combined with a clear message "upgrade only if you fall in one of the affected categories" is a good compromise, if we consider the issues this patch address as urgent-and-can't-wait-for-v5. My point to begin with is that it's important to give 4.3.2 the best chances for success, especially given 4.3.0's bad track record, and that this patch doesn't help this cause. Zeev