Re: sha1, sha2 functions into core?

From: Bruce Momjian <bruce(at)momjian(dot)us>
To: Joe Conway <mail(at)joeconway(dot)com>
Cc: Merlin Moncure <mmoncure(at)gmail(dot)com>, Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, Marko Kreen <markokr(at)gmail(dot)com>, Peter Eisentraut <peter_e(at)gmx(dot)net>, Dave Page <dpage(at)pgadmin(dot)org>, pgsql-hackers <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: sha1, sha2 functions into core?
Date: 2012-08-15 16:22:50
Message-ID: 20120815162250.GM25473@momjian.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

On Wed, Aug 15, 2012 at 09:18:48AM -0700, Joe Conway wrote:
> The final problem as you stated is weak passwords and some kind of
> dictionary attack against a stolen set of tokens and HMACs. Didn't we
> add a hook some time ago for user provided password checker?

Yes, contrib/passwordcheck:

http://www.postgresql.org/docs/9.2/static/passwordcheck.html

--
Bruce Momjian <bruce(at)momjian(dot)us> http://momjian.us
EnterpriseDB http://enterprisedb.com

+ It's impossible for everything to be true. +

In response to

Browse pgsql-hackers by date

  From Date Subject
Next Message Tom Lane 2012-08-15 16:33:18 Re: Statistics and selectivity estimation for ranges
Previous Message Bruce Momjian 2012-08-15 16:21:03 Re: text search: restricting the number of parsed words in headline generation