Re: Request #65501 uniqid(): More entropy parameter should be true by default
On Sat, Aug 24, 2013 at 7:14 AM, Yasuo Ohgaki <[email protected]> wrote:
> We shouldn't alter language design for people making bad decisions.
>> Instead, we should work on documentation and education to fix those kinds
>> of problems.
>>
>
> We definitely should do this. I agree.
>
I agree with part of documentation and education :)
uniqid() is not adequate for payment nor authentication.
It is preferred that adopting secure defaults for new release.
People do mistakes and don't read documentation. Better security
by default is the way to go. IMHO.
Regards,
--
Yasuo Ohgaki
[email protected]
Thread (19 messages)