Re: Password complexities in Postgres v14.6 - Mailing list pgsql-admin

From Magnus Hagander
Subject Re: Password complexities in Postgres v14.6
Date
Msg-id CABUevEyaUngBHdPz91K_eYb=Twbd4vMq7=_=cJoF30OQMvxvJQ@mail.gmail.com
Whole thread Raw
In response to Re: Password complexities in Postgres v14.6  (Scott Ribe <scott_ribe@elevated-dev.com>)
List pgsql-admin

On Fri, Dec 16, 2022 at 5:26 PM Scott Ribe <scott_ribe@elevated-dev.com> wrote:
> On Dec 16, 2022, at 9:17 AM, Tom Lane <tgl@sss.pgh.pa.us> wrote:
>
> ...

> (I agree that forced password rotations are also an obsolete security
> practice, but figured that one bit of push-back at a time was enough.)

I believe that NIST is now on board with this opinion, aren't they?

They have been for years.
 
--

pgsql-admin by date:

Previous
From: Scott Ribe
Date:
Subject: Re: Password complexities in Postgres v14.6
Next
From: Daulat
Date:
Subject: passwordcheck_extra module on pg v14.6