Re: Rejecting weak passwords

Поиск
Список
Период
Сортировка
От Tom Lane
Тема Re: Rejecting weak passwords
Дата
Msg-id 14583.1255536514@sss.pgh.pa.us
обсуждение исходный текст
Ответ на Re: Rejecting weak passwords  (Dave Page <dpage@pgadmin.org>)
Ответы Re: Rejecting weak passwords
Список pgsql-hackers
Dave Page <dpage@pgadmin.org> writes:
> You've twice asserted it's a reduction without providing any arguments
> to back that up.

You quoted two good arguments why it's insecure in your original
message, neither of which your proposed GUC does anything to protect
against; and you also admitted that there might be other leakage paths
we haven't thought of.  That seems to me to be more than sufficient
reason to not encourage people to go back to passing unencrypted
passwords around.
        regards, tom lane


В списке pgsql-hackers по дате отправления:

Предыдущее
От: Tom Lane
Дата:
Сообщение: Re: [PATCH] Largeobject access controls
Следующее
От: Dave Page
Дата:
Сообщение: Re: Rejecting weak passwords