Re: [PHP-DEV] Dropping SSL2 in 7.1

2016-07-14 Thread Scott Arciszewski
I was making a reference to the DROWN attack On Jul 14, 2016 4:28 AM, "Matteo Beccati" wrote: > On 13/07/2016 23:42, Scott Arciszewski wrote: > > If we don't drop SSL2 support we might DROWN in technical debt. > > > > This would get a massive +1 from me. (Can we consider dropping SSL3 too > in >

Re: [PHP-DEV] Dropping SSL2 in 7.1

2016-07-14 Thread Matteo Beccati
On 13/07/2016 23:42, Scott Arciszewski wrote: > If we don't drop SSL2 support we might DROWN in technical debt. > > This would get a massive +1 from me. (Can we consider dropping SSL3 too in > 7.2?) I'm all for dropping it. Just to be clear though, what's the massive technical debt we'd drown int

RE: [PHP-DEV] Dropping SSL2 in 7.1

2016-07-14 Thread Anatol Belski
Hi Jakub, > -Original Message- > From: jakub@gmail.com [mailto:jakub@gmail.com] On Behalf Of Jakub > Zelenka > Sent: Wednesday, July 13, 2016 9:11 PM > To: PHP internals list > Subject: [PHP-DEV] Dropping SSL2 in 7.1 > > Hi, > > It's been already proposed by Remi using PR [1] so

Re: [PHP-DEV] Dropping SSL2 in 7.1

2016-07-13 Thread Scott Arciszewski
If we don't drop SSL2 support we might DROWN in technical debt. This would get a massive +1 from me. (Can we consider dropping SSL3 too in 7.2?) Scott Arciszewski Chief Development Officer Paragon Initiative Enterprises On Wed, Jul 13, 2016 at 3:11 PM, Jakub Zelenka wrot