Re: [PHP-DEV] Re: Discussion for RFC: Set appropriate/better defaults.

2015-01-27 Thread Yasuo Ohgaki
Hi Ferenc, On Tue, Jan 27, 2015 at 6:44 PM, Ferenc Kovacs wrote: > On Tue, Jan 27, 2015 at 3:35 AM, Yasuo Ohgaki wrote: > >> Hi all, >> >> On Tue, Jan 27, 2015 at 11:06 AM, Yasuo Ohgaki >> wrote: >> >> > - session.hash_function=1 : Use SHA1 rather than MD5 >> >> >> I realized that we should r

Re: [PHP-DEV] Re: Discussion for RFC: Set appropriate/better defaults.

2015-01-27 Thread Ferenc Kovacs
On Tue, Jan 27, 2015 at 3:35 AM, Yasuo Ohgaki wrote: > Hi all, > > On Tue, Jan 27, 2015 at 11:06 AM, Yasuo Ohgaki wrote: > > > - session.hash_function=1 : Use SHA1 rather than MD5 > > > I realized that we should remove hashing for better performance. > > Since session ID is generated from crypt

[PHP-DEV] Re: Discussion for RFC: Set appropriate/better defaults.

2015-01-26 Thread Yasuo Ohgaki
Hi all, On Tue, Jan 27, 2015 at 11:06 AM, Yasuo Ohgaki wrote: > - session.hash_function=1 : Use SHA1 rather than MD5 I realized that we should remove hashing for better performance. Since session ID is generated from crypt secure RNG (/dev/urandom by default), simply converting the data into