Re: [VOTE] Timing attack safe string comparison function

From: Date: Thu, 06 Feb 2014 07:01:36 +0000
Subject: Re: [VOTE] Timing attack safe string comparison function
References: 1 2 3 4 5 6 7 8 9 10  Groups: php.internals 
Request: Send a blank email to [email protected] to get a copy of this message
Hi!

> We do not have to over react here, it is, for a change, that there is
> clear consensus about the need or wish for this feature. It is not a
> trivial thing to implement but we have time to make it rock solid
> until final 5.6.0.

There's a consensus about the feature as it was proposed, but when all
kind of things start to be added to it, that eventually becomes a
different feature from one that was voted on. If the proposal is not
ready, then the vote should be delayed. If it's ready then the constant
stream of changes, tweaks and additions looks strange - it's really hard
to know what the vote is actually about.
-- 
Stanislav Malyshev, Software Architect
SugarCRM: http://www.sugarcrm.com/
(408)454-6900 ext. 227


Thread (54 messages)

« previous php.internals (#72327) next »