Re: reducing our reliance on MD5 - Mailing list pgsql-hackers

From Tom Lane
Subject Re: reducing our reliance on MD5
Date
Msg-id 13656.1423691478@sss.pgh.pa.us
Whole thread Raw
In response to Re: reducing our reliance on MD5  (Heikki Linnakangas <hlinnakangas@vmware.com>)
Responses Re: reducing our reliance on MD5  (Stephen Frost <sfrost@snowman.net>)
List pgsql-hackers
Heikki Linnakangas <hlinnakangas@vmware.com> writes:
> On 02/11/2015 03:52 PM, Robert Haas wrote:
>> So are you thinking to integrate with the Cyrus SASL library, or do
>> you have another thought?

> I think we need to implement the primary MD5 replacement ourselves, so 
> that it's always available without extra libraries. Otherwise it will 
> not get much adoption, or the extra dependency will be a hassle anyway. 

+1

> We could also support using a library like that for additional 
> authentication mechanisms, though, for those who really need them.

We've already got a sufficiency of external authentication mechanisms.
If people wanted to use non-built-in authentication, we'd not be having
this discussion.
        regards, tom lane



pgsql-hackers by date:

Previous
From: Heikki Linnakangas
Date:
Subject: Re: reducing our reliance on MD5
Next
From: Jim Nasby
Date:
Subject: Re: Proposal : REINDEX xxx VERBOSE