| From: | Greg Sabino Mullane <htamfids(at)gmail(dot)com> |
|---|---|
| To: | Nathan Bossart <nathandbossart(at)gmail(dot)com> |
| Cc: | Robert Haas <robertmhaas(at)gmail(dot)com>, "David G(dot) Johnston" <david(dot)g(dot)johnston(at)gmail(dot)com>, Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, Isaac Morland <isaac(dot)morland(at)gmail(dot)com>, Aleksander Alekseev <aleksander(at)timescale(dot)com>, pgsql-hackers <pgsql-hackers(at)postgresql(dot)org> |
| Subject: | Re: PATCH: warn about, and deprecate, clear text passwords |
| Date: | 2026-01-09 14:57:26 |
| Message-ID: | CAKAnmm+5Yi1uSmmjGop2Gz28PRzWAuxL9LZQMuccHoC588C3YQ@mail.gmail.com |
| Views: | Whole Thread | Raw Message | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-hackers |
On Wed, Mar 19, 2025 at 11:01 AM Nathan Bossart <nathandbossart(at)gmail(dot)com>
wrote:
> One of the main reasons I'm not totally sold on a clear-text password
> warning is because we don't have
> agreement on removing that ability anytime soon, not to mention
> Bruce's point about the debate extending into mid-March.
>
Okay, we are now safely past last March :). Any further thoughts on this?
My preference is still warn by default, but I could also be on board with
ignore by default.
Nathan, I'm not sure that having a concrete resolve to someday remove
cleartext passwords should be a blocker to warning now that they are a bad
idea, but open to discussion there.
Cheers,
Greg
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Ashutosh Bapat | 2026-01-09 15:04:37 | Re: SQL Property Graph Queries (SQL/PGQ) |
| Previous Message | Greg Sabino Mullane | 2026-01-09 14:40:24 | Re: Fix how some lists are displayed by psql \d+ |