Re: Password identifiers, protocol aging and SCRAM protocol

From: Magnus Hagander <magnus(at)hagander(dot)net>
To: Michael Paquier <michael(dot)paquier(at)gmail(dot)com>
Cc: Robert Haas <robertmhaas(at)gmail(dot)com>, Stephen Frost <sfrost(at)snowman(dot)net>, David Steele <david(at)pgmasters(dot)net>, PostgreSQL mailing lists <pgsql-hackers(at)postgresql(dot)org>, Valery Popov <v(dot)popov(at)postgrespro(dot)ru>
Subject: Re: Password identifiers, protocol aging and SCRAM protocol
Date: 2016-03-22 15:41:37
Message-ID: CABUevExLdymjo_vDCvE4WCsHdp-tjpTMOJgwyQ23y-gFoCAVrQ@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

On Tue, Mar 22, 2016 at 2:48 PM, Michael Paquier <michael(dot)paquier(at)gmail(dot)com>
wrote:

> On Mon, Mar 21, 2016 at 11:07 PM, Robert Haas <robertmhaas(at)gmail(dot)com>
> wrote:
> > Well, I said before and I'll say again that I don't like the idea of
> > multiple password verifiers. I think that's an accident waiting to
> > happen, and I'm not prepared to put in the amount of time and energy
> > that it would take to get that feature committed despite not wanting
> > it myself, or for being responsible for it afterwards. I'd prefer we
> > didn't do it at all, although I'm not going to dig in my heels. I
> > might be willing to deal with SCRAM itself, but this whole area is not
> > my strongest suit. So ideally some other committer would be willing
> > to pick this up.
>
> I won't bet my hand on that.
>

In principle I'd be happy to look at it, but I doubt that I will have
enough time to get it done within this CF unfortunately. Thus I'd rather
not commit to doing it.. It kind of fell off my radar too long ago, as I
was originally planning to look at it back in the autumn, but failed.

So basically, if somebody else has the cycles to do it in time for 9.6,
please do.

I have marked the patch as returned with feedback.
>
>
Yeah, unfortunately I think that's probably right. Let's focus on things
that have a better chance of making it.

--
Magnus Hagander
Me: http://www.hagander.net/
Work: http://www.redpill-linpro.com/

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Yury Zhuravlev 2016-03-22 15:43:43 Re: NOT EXIST for PREPARE
Previous Message Jim Nasby 2016-03-22 15:40:22 Re: [PATCH] we have added support for box type in SP-GiST index