Re: Improved TLS Defaults
On Thu, Jan 30, 2014 at 12:11 PM, Rouven Weßling <[email protected]>wrote:
>
> On 30.01.2014, at 04:15, Daniel Lowrey <[email protected]> wrote:
>
> As I mentioned in the updated RFC
> text I think it makes sense to deprecate the specific wrappers in 5.6 and
> look to remove them in 5.7 as they're really unnecessary in light of the
> ability to specify flags for the specific individual protocols you wish to
> use on a given stream.
>
>
> Please don't. By deprecating in 5.6 and removing in 5.7 (which would be
> faster than anything before) you'd royally screw everyone skipping a
> version - something that gets increasingly likely with the faster release
> cycle.
>
> I'd suggest deprecating them now with this RFC and remove it in PHP 6, if
> PHP6 doesn't come around they could still be removed in a future RFC.
>
> Best regards
> Rouven
>
Sounds good to me. Will update the RFC for deprecation of the sslv2:// and
sslv3:// stream wrappers in 5.6 with removal planned for PHP 6.
Thread (19 messages)