[TYPO3-core] RFC #12502: Feature: Use HMACs for authencity and integrity checks

Marcus Krause marcus at t3sec.info
Thu Nov 12 09:38:58 CET 2009


Benjamin Mack schrieb am 11/11/2009 01:11 PM Uhr:
> Hey all,
> 
> I agree with Dmitry to not add a feature like this in 4.3 anymore.

This is an security feature and I'd like to see it in 4.3.


> Also, I agree with Dmitry to not add another additional requirement for
> the Core, however AFAIR this is not needed for the hmac() functions.

There is no additional requirement. Like already pointed out, hmacs are
in PHP packages by default. And they are in use for extbase.


Please think about it again!


Marcus.


More information about the TYPO3-team-core mailing list