Re: [DRAFT RFC] Adding Simplified Password Hashing API
| From: | Pierre Joye | Date: | Thu, 28 Jun 2012 06:15:47 +0000 |
| Subject: | Re: [DRAFT RFC] Adding Simplified Password Hashing API | ||
| References: | 1 2 3 4 5 6 7 8 9 10 11 12 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-61016@lists.php.net to get a copy of this message | ||
hi,
On Thu, Jun 28, 2012 at 12:03 AM, Ángel González <keisial@gmail.com> wrote:
> Precisely the point of such constant is to allow the applications to
> magically
Right, but not a default argument, which is bad in this case, for the
reasons explained earlier.
> Obviously, any such bump -which I would expect to happen on major releases-
> would hold an entry in the NEWS file explaining that PASSWORD_DEFAULT_HASH
I have no problem with such constant and let the user uses it instead
of a given algo. But then he will do it on purpose and being well
informed about the implications.
Cheers,
--
Pierre
@pierrejoye | http://blog.thepimp.net | http://www.libgd.org