Re: [PHP-DEV] [RFC] [VOTE] Deprecations for PHP 8.4

[Rowan Tommins [IMSoP]]

On 29 July 2024 02:19:23 BST, Morgan <weedpac...@varteg.nz> wrote:
>At that point you've got \PHP\sha3() instead of hash("sha3-?"), and now you've 
>(a) lost the word "hash" indicator of what's going on, and (b) hidden the 
>choice of "?" from the user. I'm not really seeing an improvement.

Once again, you're assuming users have any idea a) what the numbers in the SHA3 
variants mean, and b) how to choose between them. 

I've seen plenty of uses of SHA-256 in the wild, and none of the other SHA2 
variants. I don't know why, I presume people with far more knowledge than me 
have decided that is a good choice of variant. So when I'm looking for 
"something better than sha1()", I look for sha256(), remember it doesn't exist, 
and write hash('sha256', ...)

If I'm doing it wrong, and should be making some calculation to choose SHA-382 
or SHA-512, please let me know. But don't assume that just forcing me to put 
the algorithm name in qoute marks is going to make me know, or care, what the 
name actually means.

Regards,
Rowan Tommins
[IMSoP]