Re: Successor of MD5 authentication, let's use SCRAM

From: Robert Haas <robertmhaas(at)gmail(dot)com>
To: Martijn van Oosterhout <kleptog(at)svana(dot)org>
Cc: Magnus Hagander <magnus(at)hagander(dot)net>, Will Crawford <billcrawford1970(at)gmail(dot)com>, pgsql-hackers(at)postgresql(dot)org, Daniel Farina <daniel(at)heroku(dot)com>
Subject: Re: Successor of MD5 authentication, let's use SCRAM
Date: 2012-10-22 14:18:08
Message-ID: CA+TgmoZz3SYTS_01dhHBfqT=Os60gZS96TskXBvzVAw5aXta_g@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

On Sun, Oct 21, 2012 at 11:02 AM, Martijn van Oosterhout
<kleptog(at)svana(dot)org> wrote:
> It bugs me every time you have to jump through hoops and get red
> warnings for an unknown CA, whereas no encryption whatsoever is treated
> as fine while being actually even worse.

+1. Amen, brother.

--
Robert Haas
EnterpriseDB: http://www.enterprisedb.com
The Enterprise PostgreSQL Company

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Stephen Frost 2012-10-22 14:24:41 Re: Deprecations in authentication
Previous Message Kevin Grittner 2012-10-22 14:17:01 Re: [PATCH 8/8] Introduce wal decoding via catalog timetravel