On 8/5/16, 11:08 AM, "Ryan Pallas" <derokor...@gmail.com> wrote:
>Please keep it so that defaults will work, but $options is available for >tuning as that's how the feature currently works. My suggestion doesn't affect that. I agree that password_hash($password, PASSWORD_DEFAULT) should always "just work". Instead, I think there should be an interim status, before changing PASSWORD_DEFAULT, in which password_hash($password, PASSWORD_ARGON2I) requires $options. Reasons given in my first reply. There is no hurry to change PASSWORD_DEFAULT, afaik. Tom -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php
