Re: reducing our reliance on MD5

Поиск
Список
Период
Сортировка
От Claudio Freire
Тема Re: reducing our reliance on MD5
Дата
Msg-id CAGTBQpbWvMy_eOhQMhZy6FKhBqLDZKw+rq3A_ePnk9tK4nAYQg@mail.gmail.com
обсуждение исходный текст
Ответ на Re: reducing our reliance on MD5  (Peter Geoghegan <pg@heroku.com>)
Ответы Re: reducing our reliance on MD5
Список pgsql-hackers
Дерево обсуждения 
On Tue, Feb 10, 2015 at 10:19 PM, Peter Geoghegan <pg@heroku.com> wrote:
> On Tue, Feb 10, 2015 at 5:14 PM, Arthur Silva <arthurprs@gmail.com> wrote:
>> I don't think the "password storing best practices" apply to db connection
>> authentication.
>
> Why not?


Usually because handshakes use a random salt on both sides. Not sure
about pg's though, but in general collision strength is required but
not slowness, they're not bruteforceable.

В списке pgsql-hackers по дате отправления:

Предыдущее
От: Peter Eisentraut
Дата:
Сообщение: Re: GRANT USAGE on FOREIGN SERVER exposes passwords
Следующее
От: Jim Nasby
Дата:
Сообщение: Re: Manipulating complex types as non-contiguous structures in-memory