Re: [DRAFT RFC] Adding Simplified Password Hashing API
| From: | Pierre Joye | Date: | Wed, 27 Jun 2012 11:37:50 +0000 |
| Subject: | Re: [DRAFT RFC] Adding Simplified Password Hashing API | ||
| References: | 1 2 3 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-60986@lists.php.net to get a copy of this message | ||
hi,
On Wed, Jun 27, 2012 at 1:24 PM, Anthony Ferrara <ircmaxell@gmail.com> wrote:
> Simon,
>
>> * Will the value of the constant PASSWORD_DEFAULT remain unchanged forever?
>> Otherwise this lib, in my opinion, can cause big problems when trying to
>> port an existing system to a newer PHP-version.
>
> the default is designed to change over time.
That's exactly what I meant, having a changing default in this may
force code change during php updates. I'm not in favour of having such
default.
Cheers,
--
Pierre
@pierrejoye | http://blog.thepimp.net | http://www.libgd.org