Re: Password encryption method

From: "Andrus" <kobruleht2(at)hot(dot)ee>
To: pgsql-general(at)postgresql(dot)org
Subject: Re: Password encryption method
Date: 2007-01-19 16:24:32
Message-ID: eoqrdc$v94$1@news.hub.org
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

> It might make more sense to use your own table of users and hashed
> passwords
> rather than postgres'. This would depend somewhat on the overlap of users
> who
> are using your application and those who connect directly to the database.
> If there isn't much overlap, having a separate table is probably better.

Using own table requires storing Postgres user name and password in client
computer. Thus this information is available to virtually everyone haveing
access to client computer.
So this is very bad idea and should avoided at all.

Andrus.

In response to

Responses

Browse pgsql-general by date

  From Date Subject
Next Message sjarosz 2007-01-19 16:25:23 Re: Who is Slony Master/Slave + general questions.
Previous Message Ian Harding 2007-01-19 16:07:55 A Picture is Worth