Re: So we're in agreement.... - Mailing list pgsql-hackers

From Bruce Momjian
Subject Re: So we're in agreement....
Date
Msg-id 200005070343.XAA28607@candle.pha.pa.us
Whole thread Raw
In response to Re: So we're in agreement....  (The Hermit Hacker <scrappy@hub.org>)
List pgsql-hackers
> 
> So, we're going to go with less security then is available on most Unix
> OSs?  
> 
> if we are going to do this, *please* just use the regular system
> crypt() function ... for those that are using MD5 for their passwords, at
> least as it is under FreeBSD, crypt() does either MD5 or DES depending on
> the system ...
> 

We have to use MD5 with double-encription.  We have to do that because
all clients need MD5 too, and we can't assume they all have DES.


--  Bruce Momjian                        |  http://www.op.net/~candle pgman@candle.pha.pa.us               |  (610)
853-3000+  If your life is a hard drive,     |  830 Blythe Avenue +  Christ can be your backup.        |  Drexel Hill,
Pennsylvania19026
 


pgsql-hackers by date:

Previous
From: Vince Vielhaber
Date:
Subject: Re: So we're in agreement....
Next
From: "Robert B. Easter"
Date:
Subject: Re: You're on SecurityFocus.com for the cleartext passwords.