Thomas Bley wrote:
>
>
> + The .pgpass file will be automatically created if you're using
> pgAdmin III with "store password" being enabled in the connection
> settings.
>
It strikes me that this is actually a bad thing for pgadmin3 to be
doing. It should use its own file, not the deafult location, at least if
the libpq version is >= 8.1. We provided the PGPASSFILE environment
setting just so programs like this could use alternative locations for
the pgpass file. Otherwise, it seems to me we are violating the POLS, as
in the case of this user who not unnaturally thought he had found a
major security hole.
cheers
andrew
