From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([69.77.167.62] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1JHQtL-000368-Fs for garchives@archives.gentoo.org; Tue, 22 Jan 2008 21:42:47 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id AABB5E058B; Tue, 22 Jan 2008 21:42:45 +0000 (UTC) Received: from smtp2.TU-Cottbus.De (smtp2.tu-cottbus.de [141.43.99.248]) by pigeon.gentoo.org (Postfix) with ESMTP id 7F605E058B for ; Tue, 22 Jan 2008 21:42:45 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by smtp2.TU-Cottbus.De (Postfix) with ESMTP id C8792A008D for ; Tue, 22 Jan 2008 22:42:44 +0100 (CET) X-Virus-Scanned: by AMaViS (at smtp2.TU-Cottbus.De) Received: from [141.43.82.121] (at121.atelier-n.tu-cottbus.de [141.43.82.121]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by smtp2.TU-Cottbus.De (Postfix) with ESMTP id 8F95FA007D for ; Tue, 22 Jan 2008 22:42:38 +0100 (CET) Message-ID: <4796634D.8050908@gmail.com> Date: Tue, 22 Jan 2008 22:42:37 +0100 From: "pkoelle@gmail.com" User-Agent: Thunderbird 2.0.0.9 (Windows/20071031) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-server@lists.gentoo.org Reply-to: gentoo-server@lists.gentoo.org MIME-Version: 1.0 To: gentoo-server@lists.gentoo.org Subject: Re: [gentoo-server] PHP4 References: <20080118110850.C41241@shell.bway.net> <47961632.5000000@foobar.lu> <479617AD.3040800@gentoo.org> <1201025554.5987.27.camel@localhost.localdomain> <4796382F.1060001@foobar.lu> <47963BC6.3030905@norm.lu> <1201029239.7553.13.camel@localhost.localdomain> <41195fb10801221118u5037b1bfl4da36148b4ed114b@mail.gmail.com> <4796470E.7040006@norm.lu> <4796506E.80204@foobar.lu> In-Reply-To: <4796506E.80204@foobar.lu> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Archives-Salt: 099b7df0-6b95-4534-b7d7-a7d37fdd30d0 X-Archives-Hash: fa78ed299bb15ac4ef8fa13685370b26 Yves Thommes schrieb: > i agree that keeping php4 is not a good idea. if the decision was up to > me i would have completely switched to php4 a long time ago. > > and as i said before, there are customer who would prefer to no pay a > single dime and just say: we're ok with the current solution even if > we're not secure anymore and regarding their site being compromised they > have more of an "we'll cross that bridge when we come to it"-attitude. > the only thing i can do is i'll try to make perfectly clear to my > management and the customers still on that box that very soon there will > be no more security fixes and updates for the technology used by their > website and that they're located on a shared server along with other > websites who are in the same situation. if one of the sites on the > server is compromised we can't gurantee the integrity of their > data/website. after that it's up to them to decide what they really want. I'd say it's perfectionally reasonable to charge those wanting to keep php4 for the additional risk management. Even if it's a small margin, they will (finally) see a benefit in migrating their apps. cheers Paul -- gentoo-server@lists.gentoo.org mailing list