Re: [HACKERS] Hashing passwords (was Updated TODO list) - Mailing list pgsql-hackers

From Gene Sokolov
Subject Re: [HACKERS] Hashing passwords (was Updated TODO list)
Date
Msg-id 06fe01becc2f$9edf8310$0d8cdac3@aktrad.ru
Whole thread Raw
In response to Re: [HACKERS] Hashing passwords (was Updated TODO list)  (Louis Bertrand <louis@bertrandtech.on.ca>)
List pgsql-hackers
From: Louis Bertrand <louis@bertrandtech.on.ca>
> No, I am not suggesting PostgreSQL bundle any strong crypto: simply take
> advantage of what's available native on the host OS.
>
> BTW, the US export controls only apply to code written in the US. The
> Wassenaar Arrangement specifically excludes free/open software.

Not every OS has strong encryption built-in. And that means PgSQL would have
to maintain a crypto package for the OSes without the strong crypto. Thus
the benefits of using the OS encryption would be less significant.

Gene Sokolov.




pgsql-hackers by date:

Previous
From: Ryan Bradetich
Date:
Subject: Re: [HACKERS] create rule changes table to view ?
Next
From: Oleg Bartunov
Date:
Subject: Re: [HACKERS] 6.5.1 release date