Re: [pgadmin-hackers] Client-side password encryption

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: Christopher Kings-Lynne <chriskl(at)familyhealth(dot)com(dot)au>
Cc: Andrew Dunstan <andrew(at)dunslane(dot)net>, Peter Eisentraut <peter_e(at)gmx(dot)net>, pgsql-hackers(at)postgresql(dot)org, Andreas Pflug <pgadmin(at)pse-consulting(dot)de>, Dave Page <dpage(at)vale-housing(dot)co(dot)uk>
Subject: Re: [pgadmin-hackers] Client-side password encryption
Date: 2005-12-23 04:13:07
Message-ID: 15674.1135311187@sss.pgh.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgadmin-hackers pgsql-hackers

Christopher Kings-Lynne <chriskl(at)familyhealth(dot)com(dot)au> writes:
> So, can I specify the password to pg_connect() as
> 'md5127349123742342344234'?

Certainly not. We'd hardly be worrying about obscuring the original
password if the encrypted version were enough to get in with.

regards, tom lane

In response to

Responses

Browse pgadmin-hackers by date

  From Date Subject
Next Message Christopher Kings-Lynne 2005-12-23 05:19:31 Re: [pgadmin-hackers] Client-side password encryption
Previous Message Christopher Kings-Lynne 2005-12-23 02:06:24 Re: [pgadmin-hackers] Client-side password encryption

Browse pgsql-hackers by date

  From Date Subject
Next Message Tom Lane 2005-12-23 04:31:07 Re: [Bizgres-general] WAL bypass for INSERT, UPDATE and
Previous Message Christopher Kings-Lynne 2005-12-23 02:08:13 Re: Disparity in search_path SHOW and SET