Re: CREATE/ALTER ROLE PASSWORD ('value' USING 'method')

On 03/07/2017 08:29 PM, Tom Lane wrote:
> Michael Paquier <michael(dot)paquier(at)gmail(dot)com> writes:
>> here is a separate thread dedicated to the following extension for
>> CREATE/ALTER ROLE: PASSWORD ('value' USING 'method').
>
> The parentheses seem weird ... do we really need those?

+1

> + If you do not plan to use password authentication you can omit this
> + option. The methods supported are <literal>md5</> to enforce a password
> + to be MD5-encrypted, <literal>scram</> for a SCRAM-encrypted password
> + and <literal>plain</> for an unencrypted password. If the password

Can we please stop calling this encryption? What is being done is a form
of cryptographic hashing, not encryption.

Joe

--
Crunchy Data - http://crunchydata.com
PostgreSQL Support for Secure Enterprises
Consulting, Training, & Open Source Development