Hi Nikita,

Am 24.08.2013 um 12:08 schrieb Nikita Popov <nikita....@gmail.com>:
[....]
> We already have a great (version 4) UUID implementation called
> mcrypt_create_iv, just minus the fixed sequences and fancy formatting.
> Apart from moving this to core (not requiring mcrypt/openssl) and maybe
> adding alphabet support, I don't immediately see why this wouldn't be
> sufficient. Why do we need fancy UUID formatting or "unique hashes"
> (whatever that is supposed to be...)?

mcrypt_create_iv() is great but it is about usability: not every user of the 
language can create a UUIDs from mcrypt_create_iv() and we should make it as 
easy as possible to generate unique IDs. That said, a simple uuid($version) 
function would not hurt the core. I would argue that this is very similar to 
the password_hash() API. It was possible before the password API to store 
password securely, but we made it way easier now, which is a very good thing.

cu,
Lars

Attachment: signature.asc
Description: Message signed with OpenPGP using GPGMail

Reply via email to