[RFC][DISCUSSION] Session ID without hashing
| From: | Yasuo Ohgaki | Date: | Wed, 06 Apr 2016 05:47:13 +0000 |
| Subject: | [RFC][DISCUSSION] Session ID without hashing | ||
| Groups: | php.internals | ||
| Request: | Send a blank email to internals+get-92122@lists.php.net to get a copy of this message | ||
Hi all,
Session module does not require hashing to generate session ID. This
RFC removes hashing from session module and enable use_strict_mode as
an insurance for broken RNG.
https://wiki.php.net/rfc/session-id-without-hashing
Comments are appreciated!
Regards,
--
Yasuo Ohgaki
yohgaki@ohgaki.net