Hi all,

https://wiki.php.net/rfc/mcrypt-viking-funeral

The tally of closing (2016-03-22T17:00:00) is 23 Yes, 6 No. This is a 79.3%
favorable response, which exceeds the 2/3 majority by a significant margin.

Thanks to everyone who voted or participated in this discussion.

I've heard and respect some of the objections raised by folks who voted No,
but moving this liability out of the core into PECL as soon as possible is
not only a good move for the security of PHP applications, but now we know
it's the choice the community wants.

As promised, I'll get the E_DEPRECATED patch written soon.

Additionally, I will have a decrypt-only mcrypt polyfill project written
hopefully before 7.1.0-alpha but definitely before 7.1.0. This will allow
people to migrate towards something better, e.g.
openssl_encrypt()/openssl_decrypt().

Scott Arciszewski
Chief Development Officer
Paragon Initiative Enterprises <https://paragonie.com>

Reply via email to