Thread: [HACKERS] Re: pgsql: Use SASLprep to normalize passwords for SCRAMauthentication.
[HACKERS] Re: pgsql: Use SASLprep to normalize passwords for SCRAMauthentication.
From
Noah Misch
Date:
On Fri, Apr 07, 2017 at 11:58:10AM +0000, Heikki Linnakangas wrote: > No documentation changes included, because there is no details on the > SCRAM mechanism in the docs anyway. An overview on that in the protocol > specification would probably be good, even though SCRAM is documented in > detail in RFC5802. I'll write that as a separate patch. An important thing > to mention there is that we apply SASLprep even on invalid UTF-8 strings, > to support other encodings. [Action required within three days. This is a generic notification.] The above-described topic is currently a PostgreSQL 10 open item. Heikki, since you committed the patch believed to have created it, you own this open item. If some other commit is more relevant or if this does not belong as a v10 open item, please let us know. Otherwise, please observe the policy on open item ownership[1] and send a status update within three calendar days of this message. Include a date for your subsequent status update. Testers may discover new open items at any time, and I want to plan to get them all fixed well in advance of shipping v10. Consequently, I will appreciate your efforts toward speedy resolution. Thanks. [1] https://www.postgresql.org/message-id/20170404140717.GA2675809%40tornado.leadboat.com