[TYPO3-core] RFC #12502: Feature: Use HMACs for authencity and integrity checks

[Martin Kutschker]

Dmitry Dulepov schrieb:
> Hi!
> 
> Benjamin Mack wrote:
>> I agree with Dmitry to not add a feature like this in 4.3 anymore.
>>
>> Also, I agree with Dmitry to not add another additional requirement for
>> the Core, however AFAIR this is not needed for the hmac() functions.
>>
>> http://www.php.net/manual/en/hash.installation.php
> 
> Is it true also for PHP 5.2? I see that OpenID libraries check for the availability of hash extension. May be that OpenID code is too old.

If you compile/configure PHP manually you can disable any PHP extension. So in theory you must
always check - or provide a list of required extensions.

Masi