Scott

https://twitter.com/csoghoian/status/711619683997323264

Better nonce generator

2

Offending code: * https://github.com/Lusitanian/PHPoAuthLib/blob/09f4af38f17db6938253f4d1b171d537913ac1ed/src/OAuth/OAuth1/Service/AbstractService.php#L255-L273 * https://github.com/Lusitanian/PHPoAuthLib/blob/09f4af38f17db6938253f4d1b171d537913ac1ed/src/OAuth/OAuth2/Service/AbstractService.php#L276 How to do it instead: https://paragonie.com/blog/2015/07/how-safely-generate-random-strings-and-integers-in-php

[Future] Code Signing and Enhanced Security Against Supply-Chain Attacks

6

Before I begin, here's some supplementary reading material. I'll try to make this feature request make sense without reading any of this material, but in case I fail this should...

Replace floating point operations with integer ops

1

Context: https://twitter.com/CiPHPerCoder/status/1183435549442486272

Just to save everyone some time:  This is not a mistake. This is not weird. This is not being removed. ### What's going on? See https://github.com/paragonie/random_compat#version-99999 I put it...

See instead: * https://github.com/paragonie-scott/public-projects/issues/5 * https://github.com/paragonie/chronicle * https://github.com/paragonie/herd This will allow people to self-host their own Chronicles if they decide they do not trust PIE, and that will suffice.

Dockerfile - use Caddy instead of Apache2

3

We actually recommend [Caddy](https://caddyserver.com) over Apache or nginx due to its seamless LetsEncrypt integration (automatic HTTPS). Some time in the future, I'd like to play around with Docker and create...

Implement Automated Integration Testing

3

This was suggested by @co60ca over Twitter, and while I think it's a good idea in the abstract, it's probably not the absolute number one priority before getting the next...

From https://github.com/paragonie/airship/issues/46#issuecomment-230859789

Follow-up to #46