On Tue, Feb 4, 2014 at 8:57 AM, Lester Caine <[email protected]> wrote:
> Pierre Joye wrote:
>>>
>>> Security is not the
>>> >only thing that is reliant nowadays on third party data?
>>
>> We bundle the TZ data and it is used on all supported platforms. So
>> no, no platform lags behind other. Some distributions may patch the
>> date extension to use the system TZ but then it is none of our
>> business.
>
>
> But that is the whole point here ... it's the same argument with CA file?
If someone distributes a patched PHP, it is none of our business.
And CA file on Windows is not the same issue as Windows do not have
system CA files compatible with OpenSSL. Implementing a backend using
windows keys store and SSL APIs would bring more issues and
incompatibilities (user lever) than asking users to set an ini
setting.