Re: Password encryption - Mailing list pgsql-docs

From pinker
Subject Re: Password encryption
Date
Msg-id 1531484400661-0.post@n3.nabble.com
Whole thread Raw
In response to Re: [DOCS] Password encryption  (Michael Paquier <michael.paquier@gmail.com>)
List pgsql-docs
Michael Paquier wrote
> 
> A user knowing only the MD5 hash, and not the plain password would
> still be able to connect, so you really had better use SSL anyway if
> connecting with an untrusted network. Postgres 10 comes up with
> SCRAM-SHA-256 by the way, which is stronger by design for such things.

Hi, with untrusted network you mean eavesdropping or some other "evil"
technique?
With normal client like psql or pgAdmin is no way to log in having only md5
hash, right?



--
Sent from: http://www.postgresql-archive.org/PostgreSQL-docs-f2165602.html


pgsql-docs by date:

Previous
From: Peter Eisentraut
Date:
Subject: Re: Documented toolchain for building docs on Windows
Next
From: Bruce Momjian
Date:
Subject: Re: Add Pgfe library to client interfaces