On Mon, Feb 10, 2020 at 5:36 PM Mark Randall <marand...@php.net> wrote:
> On 10/02/2020 21:49, Tom Van Looy via internals wrote: > > I suggest to deprecated the functions md5_file() and sha1_file(). This > will > > make people think about upgrading to a better alternative. > > It won't. > > At best it will make people switch to the hash function. At worst people > will not upgrade. > > If people are using the existing md5 / sha1 algorithms, chances are it's > because they're actually wanting to get a hash to compare to something > that has already been stored. > > There's not much point in deprecating the algorithm if we don't > eventually plan to remove it, and there is an exactly zero percent > chance of it being removed at any point in the next 50 years. > > Mark Randall > > -- > PHP Internals - PHP Runtime Development Mailing List > To unsubscribe, visit: http://www.php.net/unsub.php > > Why? What does deprecating those two functions do to make PHP a better language? It doesn't add any new features. It doesn't fix any security issues. It doesn't even take away the ability to perform the functionality that they provide, since it still exists in the hash_file function. If you don't like the function, then don't use it. -- Chase Peeler chasepee...@gmail.com
