Re: reducing our reliance on MD5

From: Peter Geoghegan <pg(at)heroku(dot)com>
To: Arthur Silva <arthurprs(at)gmail(dot)com>
Cc: Robert Haas <robertmhaas(at)gmail(dot)com>, "pgsql-hackers(at)postgresql(dot)org" <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: reducing our reliance on MD5
Date: 2015-02-11 01:25:37
Message-ID: CAM3SWZQDLBU_PhObQU-3L3xtXZv0KM6y5ivgGCZ3zL6H-N-vaw@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

On Tue, Feb 10, 2015 at 5:22 PM, Arthur Silva <arthurprs(at)gmail(dot)com> wrote:
> I assume if the hacker can intercept the server unencrypted traffic and/or
> has access to its hard-drive the database is compromised anyway.

That sounds like an argument against hashing the passwords in general.

--
Peter Geoghegan

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Robert Haas 2015-02-11 01:28:51 Re: reducing our reliance on MD5
Previous Message Arthur Silva 2015-02-11 01:22:33 Re: reducing our reliance on MD5