« first day (2303 days earlier)      last day (2871 days later) » 

23:00
@bwoebi argon2 is more like pbkdf2 ... and it's an alternative, not something you plug into it
@DaveRandom I am preparing for interview and I stuck at this point
Argon2's an interesting design; it makes heavy use of the BLAKE2 compression function G over rows and columns of memory and makes it difficult to find a realistic TMTO
@ScottArciszewski also, is there a reason why basically every function needs a "crypto" in its name?
@markzz If you pass a script after php -S, that script will be called for all URLs.
So that would be sortof similar to that nginx rewrite
23:03
@ScottArciszewski sure, but then we do not need another sodium prefix, it's just redundant
If you didn't pass the index.php after php -S then it probably wouldn't work?
frankly, I don't care
@NikiC The command I use is php -S localhost:8080 -t web/html. I'm not specifying a script, unless it's then assuming index.php.
take that up with Frank Denis
@markzz ah, okay
23:03
@ScottArciszewski who's that?
the jedisct1 in jedisct1/libsodium
@NikiC And it works and a few of us in the project's IRC channel are curious.
@markzz in that case not sure how the magic works, cli server isn't really my turf
I care about things that affect security, not bikeshedding about API or naming
@NikiC Would you know who might know?
23:05
if there's to be a proposed change, my opinion is irrelevant
> If an index.php or index.html is found, it is returned and $_SERVER['PATH_INFO'] is set to the trailing part of the URI. Otherwise a 404 response code is returned.
So yeah, looks like if the path doesn't exist and it finds an index.php the uri after that is put into the path_info
@ScottArciszewski yeah, true, that's why openssl is that bad :-P // well, feel free to not care, I just mentioned it as I'd prefer it that way. I don't care what the original author of the PECL ext did. I do though a little when we introduce it into coreā€¦
@NikiC Thanks.
it's not a bad point to bring up, but it really should've been brought up during the discussion period
and it should've been brought up to someone whose opinion is relevant
@ScottArciszewski Ha! Discussion starts with voting ^^
23:07
@ScottArciszewski I did not notice the RFC being there in discussion period :-/
@Exception ah OK. Well this looks like it might be worth working through. It's not targeting PHP but that doesn't really matter because the concepts are universal. The only difference in PHP and what is described there is that PHP doesn't have a >>> operator, it only has >>.
I only realized it were moved to discussion&vote when @Jeeves mentioned it^^
@bwoebi Well I feel loved. Thanks bro.
are emails not going through? :S
23:08
@ScottArciszewski they are currently
just nobody is reading them
so, normal operation
But there were only few mails on that topic and I must have missed it between other discussions
what's not visible in that thread: me messaging several folks through other means (including Pierre Joye) to ask them for feedback between then and when I opened the vote
sorry I wasn't more annoying
@DaveRandom thanks man I will look into it
definitely
23:13
for what it's worth, if sodium_foo ends up winning I'll probably just change e.g. sodium_crypto_box to sodium_box for simplicity
I have another question regarding this.. codepad.org/fkAqGWtI
needlessly long function names make no one happy
@ScottArciszewski yeah, that's what I meant
and at that point also no gain in the namespace IMHO
the namespace is what the PECL extension does right now
that's all
my incentive towards \Sodium\foo is simply "now I don't have to rewrite existing code"
@Exception PHP sees that there is an addition operation being performed, and so attempts to convert the string to a valid number, using these rules. That way of representing a number is called scientific notation, and the "e" is for "exponent".
23:17
unrelated note: why didn't property types pass again?
class Foo {
public string $bar = 'baz';
}
^ that thing
I was really looking forward to it
@ScottArciszewski concerns about references, imparity to static types,
ah
any chance we'll see a resurrection for 7.2?
yes
@DaveRandom got it thanks :)
@Exception yes
@Leigh what do you think?
Aren't you supposed to be working this out yourself?
i can but I need to get technical ans. which I expect from you guys
I guess it falls under LSP if you want something technical
The function prototype can be the same or wider in scope, so that excludes private visibility
23:44
okay..
mumbles something about error conditions also being part of defined program behaviour
Guy at work doesn't like exceptions, because "then he has to put try/catch everywhere, and it looks messy"
@Leigh oh, so he likes Go then?
I tried explaining the exception wasn't supposed to be caught... I gave up
error checking is not the same as exceptions
I guess the Go analog would be panic/recover
yeah.....but exceptions are basically unusable in Go (as there is only one exception type), so you have to do error checking everywhere......which is what he's doing (I guess).
23:54
The real problem is everyone else of course. Those who use exceptions for flow control

« first day (2303 days earlier)      last day (2871 days later) »