Re: encryption of password

From: Dave Cramer <davecramer(at)postgres(dot)rocks>
To: Benjamin Pochat <benjamin(dot)pochat(at)gmail(dot)com>
Cc: "pgsql-odbc(at)postgresql(dot)org" <pgsql-odbc(at)postgresql(dot)org>, Oliver Spickhoff <oliver(dot)spickhoff(at)osyon(dot)com>
Subject: Re: encryption of password
Date: 2024-11-20 16:26:05
Message-ID: CADK3HHJqiZWkftjjD=e_w3XLY6ri-0nXFKR4JQfL_dhab+8mig@mail.gmail.com
Views: Whole Thread | Raw Message | Download mbox | Resend email
Thread:
Lists: pgsql-odbc

Please post this on github https://github.com/postgresql-interfaces/psqlodbc
Dave Cramer
www.postgres.rocks

On Wed, 20 Nov 2024 at 09:18, Benjamin Pochat <benjamin(dot)pochat(at)gmail(dot)com>
wrote:

> Hi,
>
> I was looking for the same feature.
>
> In my company, the use of postgre odbc client is compromised because
> passwords are stored as clear text in Windows registry.
> Our use case consists in individual authentication to postgre databases,
> thanks to ldap2pg tool, for BI purposes.
> As a consequence, individual passwords are used in odbc clients.
> Then, the fact that postgre odbc client stores these passwords as clear
> text is a real security issue.
>
> Password encryption would be really appreciated.
>
> Regards,
>
> Benjamin
>
> Le mer. 20 nov. 2024 à 14:58, Oliver Spickhoff <oliver(dot)spickhoff(at)osyon(dot)com>
> a écrit :
>
>> Hi,
>>
>>
>>
>> I have a suggestion for an enhancement:
>>
>> When you click SAVE the password is stored as clear text in
>> HKEY_CURRENT_USER\Software\ODBC\ODBC.INI\postgres\Password
>>
>>
>>
>> Would it be possible to store the password encrypted?
>>
>>
>>
>>
>>
>> Thanks,
>>
>> Oliver
>>
>> Oliver Spickhoff
>> Geschäftsführer • Managing Director
>>
>> OSYON GmbH • Pfuelstraße 5 • 10997 Berlin • Germany
>> fon +49 30 310135-0 • fax +49 30 310135-55
>> oliver(dot)spickhoff(at)osyon(dot)com • www.osyon.com
>>
>> [image: OSYON GmbH]
>>
>> Reg-Nr: HRB 82465 AG Charlottenburg • USt-ID: DE217618646 •
>> Geschäftsführer: Oliver Spickhoff
>>
>>
>>

In response to

Responses

Browse pgsql-odbc by date

  From Date Subject
Next Message Benjamin POCHAT 2024-11-21 07:28:18 Re: encryption of password
Previous Message Benjamin Pochat 2024-11-20 14:08:29 Re: encryption of password