Re: Rejecting weak passwords - Mailing list pgsql-hackers

From Robert Haas
Subject Re: Rejecting weak passwords
Date
Msg-id 603c8f070909281140h31d2150dtd14b00b49b101c59@mail.gmail.com
Whole thread Raw
In response to Re: Rejecting weak passwords  (Marko Kreen <markokr@gmail.com>)
List pgsql-hackers
On Mon, Sep 28, 2009 at 2:00 PM, Marko Kreen <markokr@gmail.com> wrote:
> So promoting the ENCRYPTED 'foo' as "secure" may lure users into
> false sense of security, and be lax against sniffing and logfile
> protection.

ENCRYPTED prevents the user's password from being stolen by a modified server.

...Robert


pgsql-hackers by date:

Previous
From: Tom Lane
Date:
Subject: Re: Rejecting weak passwords
Next
From: Pavel Stehule
Date:
Subject: Re: patch: Review handling of MOVE and FETCH (ToDo)