| From: | Michael Paquier <michael(dot)paquier(at)gmail(dot)com> |
|---|---|
| To: | Craig Ringer <craig(at)2ndquadrant(dot)com> |
| Cc: | chiru r <chirupg(at)gmail(dot)com>, Forums postgresql <pgsql-general(at)postgresql(dot)org>, PostgreSQL Hackers <pgsql-hackers(at)postgresql(dot)org> |
| Subject: | Re: [HACKERS] SSL and Encryption |
| Date: | 2017-11-03 04:39:57 |
| Message-ID: | CAB7nPqQdWJEkMMvK9WFbvCqT61mA2WDAyvfZc_rQMzd530TSqw@mail.gmail.com |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-general pgsql-hackers |
On Fri, Nov 3, 2017 at 3:19 AM, Craig Ringer <craig(at)2ndquadrant(dot)com> wrote:
> This is probably off topic for pgsql-hackers.
>
> For password crypto please go read the SCRAM thread and the PostgreSQL
> 10 release notes.
The SCRAM discussion is spread across two threads mainly with hundreds
of emails, which may discourage even the bravest. Here are links to
the important documentation:
https://www.postgresql.org/docs/current/static/auth-methods.html#auth-password
https://www.postgresql.org/docs/10/static/sasl-authentication.html
And PostgreSQL implements SCRAM-SHA-256 following RFCs 7677 and 5802:
https://tools.ietf.org/html/rfc5802
https://tools.ietf.org/html/rfc7677
--
Michael
| From | Date | Subject | |
|---|---|---|---|
| Next Message | John R Pierce | 2017-11-03 04:58:00 | Re: [HACKERS] SSL and Encryption |
| Previous Message | Craig Ringer | 2017-11-03 03:19:55 | Re: [HACKERS] SSL and Encryption |
| From | Date | Subject | |
|---|---|---|---|
| Next Message | David Rowley | 2017-11-03 04:41:52 | Re: ArrayLists instead of List (for some things) |
| Previous Message | David Rowley | 2017-11-03 04:32:59 | Re: path toward faster partition pruning |