Hello Pierre, > Again, please tell me which part of Suhosin would make sense to have > in the core? With technical explanation or details. Then we can begin > a good discussion and maybe a RFC to get them in.
what part of "all of it and I am not going to try to convince you about this" do you not understand? I am not interested in pushing Suhosin into PHP mainline. Why in hell would I want that. If Suhosin gets absorbed by PHP.net then I would have to start a new project, because there are tons of mitigations I can think up that will be implemented at some point in time and will never make it into PHP mainline. With Suhosin existing I am free to implement as many security mitigations I like and do not have to beg the PHP developers to consider adding something. Regards, Stefan -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php