Re: PostgreSQL v7.2 Final Release

>>>>> "Doug" == Doug McNaught <doug(at)wireboard(dot)com> writes:

Doug> Turbo Fredriksson <turbo(at)bayour(dot)com> writes:
>> Quoting "Marc G. Fournier" <scrappy(at)postgresql(dot)org>:
>>
>> > For Immediate Release February 5th, 2002
>> >
>> > Security > A new MD5 encryption option allows more secure
>> storage and > transfer of passwords. A new Unix-domain socket
>> authentication > option is available on Linux and BSD systems.
>>
>> First question:
>>
>> Is this backport(-able/-ed) to 7.1.3?

Doug> If you're referring to the unix-socket authentication, the
Doug> Debian patch for 7.1.X is where it came from--it wasn't in
Doug> mainline until 7.2.

I was more refering to the on-disk encrypted password. A user (which
have root) found the password in two minutes with grep...

>> Is 7.2 ready for production?

Doug> The developers obviously think so.

Good enough. I'll download it and try it out then. Thanx.

Albanian killed subway explosion president Treasury Ft. Meade Iran
World Trade Center BATF Panama ammunition nitrate CIA smuggle
[See http://www.aclu.org/echelonwatch/index.html for more about this]