Re: Security changes in PHP 7
| From: | Yasuo Ohgaki | Date: | Sun, 08 Feb 2015 06:43:33 +0000 |
| Subject: | Re: Security changes in PHP 7 | ||
| References: | 1 2 3 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-82121@lists.php.net to get a copy of this message | ||
Hi Pierre,
On Sun, Feb 8, 2015 at 3:04 PM, Pierre Joye <pierre.php@gmail.com> wrote:
> On Feb 8, 2015 12:48 PM, "Yasuo Ohgaki" <yohgaki@ohgaki.net> wrote:
>
> >> 2. What's going to happen to mcrypt?
> >>
> >> I see the vote to excise it did not pass. Does this mean that (i.e.
> >> imply that) PHP's plan is to keep a security lib that hasn't been
> >> maintained for 8 years for the next 5+ years?
> >
> >
> > Removed.
> > Available as PECL module.
> > Probably.
>
> Please check the RFC.
>
> It is not removed and unless some people changed their mind the horrible
> scenario described here will happen. And it will be longer than 5 years.
>
https://wiki.php.net/start#extmcrypt
Voted +1
--
Yasuo Ohgaki
yohgaki@ohgaki.net