Re: [HACKERS] password_encryption, default and 'plain' support

Hi,

In various threads on SCRAM, we've skirted around the question of whether we should still allow storing passwords in plaintext. I've avoided discussing that in those other threads, because it's been an orthogonal question, but it's a good question and we should discuss it.

So, I propose that we remove support for password_encryption='plain' in PostgreSQL 10. If you try to do that, you'll get an error.

Another question that's been touched upon but not explicitly discussed, is whether we should change the default to "scram-sha-256". I propose that we do that as well. If you need to stick to md5, e.g. because you use drivers that don't support SCRAM yet, you can change it in postgresql.conf, but the majority of installations that use modern clients will be more secure by default.