| From: | Bruce Momjian <pgman(at)candle(dot)pha(dot)pa(dot)us> |
|---|---|
| To: | Ron Snyder <snyder(at)roguewave(dot)com> |
| Cc: | "Marc G(dot) Fournier" <scrappy(at)hub(dot)org>, Neil Conway <nconway(at)klamath(dot)dyndns(dot)org>, PostgreSQL-development <pgsql-hackers(at)postgresql(dot)org> |
| Subject: | Re: Open 7.3 items |
| Date: | 2002-08-01 01:05:13 |
| Message-ID: | 200208010105.g7115Dj10213@candle.pha.pa.us |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-hackers |
Ron Snyder wrote:
> >
> > Yes, is that your pg_hba.conf line? 'password' is insecure over
> > networks you don't trust.
>
> Yes, we're using 'password password' in our pg_hba.conf file. I trust my
> network (so far).
That is another major limitation to secondary password files. In fact,
md5 will not even work because we assume the username is used as the
salt for the md5 encryption. We don't store the salt as part of the
encrypted password like crypt does.
This was another reason secondary password files were discouraged.
Let me look at adding the colon password capability and see what it
looks like.
--
Bruce Momjian | http://candle.pha.pa.us
pgman(at)candle(dot)pha(dot)pa(dot)us | (610) 853-3000
+ If your life is a hard drive, | 830 Blythe Avenue
+ Christ can be your backup. | Drexel Hill, Pennsylvania 19026
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Curt Sampson | 2002-08-01 01:27:51 | Re: Rules and Views |
| Previous Message | Ron Snyder | 2002-07-31 23:06:42 | Re: Open 7.3 items |