Received-SPF: pass (sog-mx-1.v43.ch3.sourceforge.com: domain of zikula.org
	designates 74.125.82.46 as permitted sender)
	client-ip=74.125.82.46; envelope-from=drak@zikula.org;
	helo=mail-wg0-f46.google.com; 
MIME-Version: 1.0
In-Reply-To: <CANEZrP3owLtLnBHZ4vEBYcdkQ0WtpDDQ8CXK+92oNd1rgaEZyg@mail.gmail.com>
References: <op.xb05iptvyldrnw@laptop-air> <op.xb2352ezyldrnw@laptop-air>
	<CANEZrP22SF4bD2pA3MyNmAojUmtZ20r=eL2Lgt=Fa4ZJyG=5SA@mail.gmail.com>
	<CANAnSg1fwkzXebbCMEf6XeGD0SG+ny=vKW-2nC_40yhkn1LVkg@mail.gmail.com>
	<CANEZrP3owLtLnBHZ4vEBYcdkQ0WtpDDQ8CXK+92oNd1rgaEZyg@mail.gmail.com>
From: Drak <drak@zikula.org>
Date: Mon, 3 Mar 2014 12:39:36 +0000
Message-ID: <CANAnSg2VsKaqPTckf45DemP0KxC05MZS++c7BP7MRL18f3YWzA@mail.gmail.com>
To: Mike Hearn <mike@plan99.net>
Content-Type: multipart/alternative; boundary=089e0102ddaec0b4bd04f3b31569
Cc: Bitcoin Dev <bitcoin-development@lists.sourceforge.net>
Subject: Re: [Bitcoin-development] Payment Protocol Hash Comments
Precedence: list

--089e0102ddaec0b4bd04f3b31569
Content-Type: text/plain; charset=UTF-8

On 2 March 2014 10:39, Mike Hearn <mike@plan99.net> wrote:

> I'm just repeating the rationale Gavin gave me for adding this to the spec
> last year when he was implementing it. Perhaps it only applied to some
> versions of PHP or something like that.
>

OK, but certainly now, SHA-2 is available as standard in PHP and has been
since PHP 5.1.2 as part of the hash() function. You can see from usage
stats that means practically every installation
http://w3techs.com/technologies/details/pl-php/5/all is PHP 5.2 and above.

Unless there is some other compelling reason, I would suggest removing
SHA-1 from the specification.

Drak

--089e0102ddaec0b4bd04f3b31569
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div class=3D"gmail_extra"><div class=3D"gmail_quote">On 2=
 March 2014 10:39, Mike Hearn <span dir=3D"ltr">&lt;<a href=3D"mailto:mike@=
plan99.net" target=3D"_blank">mike@plan99.net</a>&gt;</span> wrote:<br><blo=
ckquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left=
-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;paddi=
ng-left:1ex">

<div dir=3D"ltr">I&#39;m just repeating the rationale Gavin gave me for add=
ing this to the spec last year when he was implementing it. Perhaps it only=
 applied to some versions of PHP or something like that.</div></blockquote>

<div><br></div><div>OK, but certainly now, SHA-2 is available as standard i=
n PHP and has been since PHP 5.1.2 as part of the hash() function. You can =
see from usage stats that means practically every installation <a href=3D"h=
ttp://w3techs.com/technologies/details/pl-php/5/all">http://w3techs.com/tec=
hnologies/details/pl-php/5/all</a> is PHP 5.2 and above.</div>

<div><br></div><div>Unless there is some other compelling reason, I would s=
uggest removing SHA-1 from the specification.</div><div>=C2=A0</div><div>Dr=
ak</div></div></div></div>

--089e0102ddaec0b4bd04f3b31569--