2 ms·
I'm moving less for a PSR and more for a core library that abstracts cryptography details away from the user. The average PHP developer can't be trusted to Encr
by sarciszewski 11y ago
I'm moving less for a PSR and more for a core library that abstracts cryptography details away from the user. The average PHP developer can't be trusted to Encrypt-then-MAC, so why burden them with the responsibility?
- trebor 11y agoWhile true, there are quite a few programmers who can. I'd go for a core library + PSR, so that the average developer can still use the core library. That way advanced developers can use something PSR compatible, and libraries that depend on the core library can still function.