Re: [HACKERS] password_encryption, default and 'plain' support - Mailing list pgsql-hackers

From Magnus Hagander
Subject Re: [HACKERS] password_encryption, default and 'plain' support
Date
Msg-id CABUevEzfCpzJGYve6QWj9PnfCoWNge=sFUvjMTRoBr--Gdmung@mail.gmail.com
Whole thread Raw
In response to Re: [HACKERS] password_encryption, default and 'plain' support  (Michael Paquier <michael.paquier@gmail.com>)
Responses Re: [HACKERS] password_encryption, default and 'plain' support  (Michael Paquier <michael.paquier@gmail.com>)
List pgsql-hackers


On Wed, May 3, 2017 at 2:25 PM, Michael Paquier <michael.paquier@gmail.com> wrote:
On Wed, May 3, 2017 at 8:38 PM, Magnus Hagander <magnus@hagander.net> wrote:
> On Wed, May 3, 2017 at 1:31 PM, Heikki Linnakangas <hlinnaka@iki.fi> wrote:
>> In various threads on SCRAM, we've skirted around the question of whether
>> we should still allow storing passwords in plaintext. I've avoided
>> discussing that in those other threads, because it's been an orthogonal
>> question, but it's a good question and we should discuss it.
>>
>> So, I propose that we remove support for password_encryption='plain' in
>> PostgreSQL 10. If you try to do that, you'll get an error.
>
> Is there any usecase at all for it today?

For developers running applications on top of Postgres?

I don't get it. How does password_encryption=plain help them? 


--

pgsql-hackers by date:

Previous
From: Ashutosh Sharma
Date:
Subject: Re: [HACKERS] Re: [BUGS] BUG #14634: On Windows pg_basebackup shouldwrite tar to stdout in binary mode
Next
From: amul sul
Date:
Subject: Re: [HACKERS] [POC] hash partitioning