Re: [RFC][VOTE] Deprecate then Remove Mcrypt Closed (23-6)

On Tue, Mar 22, 2016 at 6:00 PM, Scott Arciszewski <scott@paragonie.com> wrote: > Hi all, > > https://wiki.php.net/rfc/mcrypt-viking-funeral > > The tally of closing (2016-03-22T17:00:00) is 23 Yes, 6 No. This is a 79.3% > favorable response, which exceeds the 2/3 majority by a significant margin. > > Thanks to everyone who voted or participated in this discussion. > > I've heard and respect some of the objections raised by folks who voted No, > but moving this liability out of the core into PECL as soon as possible is > not only a good move for the security of PHP applications, but now we know > it's the choice the community wants. > > As promised, I'll get the E_DEPRECATED patch written soon. > > Additionally, I will have a decrypt-only mcrypt polyfill project written > hopefully before 7.1.0-alpha but definitely before 7.1.0. This will allow > people to migrate towards something better, e.g. > openssl_encrypt()/openssl_decrypt(). > > Scott Arciszewski > Chief Development Officer > Paragon Initiative Enterprises <https://paragonie.com> > You ignored the voting process and my headsup mail about it, and also ignored most of the feedback from the replies. -- Ferenc Kovács @Tyr43l - http://tyrael.hu