Re: You're on SecurityFocus.com for the cleartext passwords. - Mailing list pgsql-hackers

From Vince Vielhaber
Subject Re: You're on SecurityFocus.com for the cleartext passwords.
Date
Msg-id Pine.BSF.4.21.0005061206420.13987-100000@paprika.michvhf.com
Whole thread Raw
In response to Re: You're on SecurityFocus.com for the cleartext passwords.  (Bruce Momjian <pgman@candle.pha.pa.us>)
Responses Re: You're on SecurityFocus.com for the cleartext passwords.
Re: You're on SecurityFocus.com for the cleartext passwords.
List pgsql-hackers
On Sat, 6 May 2000, Bruce Momjian wrote:

> > > Sounds like a winner.  Comments?
> > 
> > Overlycomplicated?
> > 
> > What was your objection to MD5 again?
> 
> Also, MD5 is not ideal for passwords.  Seems the standard unix-style
> password crypting is the standard, so it should be used to crypt our own
> passwords in pg_shadow.  I am sure someone would find some problem with
> us using md5 for password storage.

FreeBSD uses MD5 by default since at least ver 2.2, possibly earlier.
> We already use the unix-style password crypt to send passwords over the
> wire.  Why not use it for storage too?

Can ALL clients we support use it over the wire?  

Vince.
-- 
==========================================================================
Vince Vielhaber -- KA8CSH    email: vev@michvhf.com    http://www.pop4.net128K ISDN from $22.00/mo - 56K Dialup from
$16.00/moat Pop4 Networking       Online Campground Directory    http://www.camping-usa.com      Online Giftshop
Superstore   http://www.cloudninegifts.com
 
==========================================================================





pgsql-hackers by date:

Previous
From: Bruce Momjian
Date:
Subject: Re: You're on SecurityFocus.com for the cleartext passwords.
Next
From: Bruce Momjian
Date:
Subject: Re: You're on SecurityFocus.com for the cleartext passwords.