On 28.02.22 00:17, Jeff Davis wrote:
>> I also have in mind here that there has been discussion of giving
>> libpq a feature to refuse, on the client side, to send cleartext
>> passwords.
> I am generally in favor of that idea, but I'm not sure that will
> completely resolve the issue. For instance, should it also refuse MD5?
Presumably that feature could be more generally "refuse these
authentication mechanisms" rather than only one hardcoded one.
