Re: You're on SecurityFocus.com for the cleartext passwords. - Mailing list pgsql-hackers

From Bruce Momjian
Subject Re: You're on SecurityFocus.com for the cleartext passwords.
Date
Msg-id 200005061548.LAA12370@candle.pha.pa.us
Whole thread Raw
In response to Re: You're on SecurityFocus.com for the cleartext passwords.  (Vince Vielhaber <vev@michvhf.com>)
List pgsql-hackers
> > This has the huge advantage of not requiring any new crypting methods on
> > the client.  It only requires the crypt to happen twice using two
> > different salts.
> > 
> > Sounds like a winner.  Comments?
> 
> Overlycomplicated?
> 
> What was your objection to MD5 again?

Not really.  We are using our same unix crypt code, which works on all
platforms.  The change to each interface is minimal.  Not much testing
will be required.

--  Bruce Momjian                        |  http://www.op.net/~candle pgman@candle.pha.pa.us               |  (610)
853-3000+  If your life is a hard drive,     |  830 Blythe Avenue +  Christ can be your backup.        |  Drexel Hill,
Pennsylvania19026
 


pgsql-hackers by date:

Previous
From: Vince Vielhaber
Date:
Subject: Re: You're on SecurityFocus.com for the cleartext passwords.
Next
From: Bruce Momjian
Date:
Subject: Re: You're on SecurityFocus.com for the cleartext passwords.