Not sure if I posted in correct spot....
But seems to be topic of today...funny on same day I hear from Visa.
Windows based app.
encryped pwd = yes
SSL = yes,
hostssl, with explicit IP w/md5,. (no pg_crypto)
This is just with client / server pwd auth
We are in process of VISA CISP PCI compliance for our application.
(online cc auth - no stored cc data)
[next phase will include stored cc data]
We just heard back today that they would like to use SHA1 NOT md5 for
does anyone have any doco that will support md5 vs. SHA1?
is PG_crypto in the db (meaning crypt the md5 hash )still the same as
We also have global customers so we understand the US v non-US export stuff.
Any direction is appreciated.
Thanks in advance.
Secom International, Inc
9610 Bellanca, Ave.
Los Angeles, CA 90045
This e-mail is intended for the addressee shown. It contains information
that is confidential and protected from disclosure. Any review,
dissemination or use of this transmission or its contents by persons or
unauthorized employees of the intended organisations is strictly
The contents of this email do not necessarily represent the views or
policies of Secom International Inc., or its employees.
pgsql-hackers by date
|Next:||From: Greg Smith||Date: 2008-04-02 17:58:03|
|Subject: Patch queue -> wiki (was varadic patch)|
|Previous:||From: Alvaro Herrera||Date: 2008-04-02 17:51:57|
|Subject: Re: US VISA CISP PCI comp. needs SHA1|