Re: [HACKERS] Enhancements to passwordcheck

Поиск
Список
Период
Сортировка
От Peter Eisentraut
Тема Re: [HACKERS] Enhancements to passwordcheck
Дата
Msg-id 0c115849-2123-3b3d-55de-fa218f40ef48@2ndquadrant.com
обсуждение исходный текст
Ответ на Re: [HACKERS] Enhancements to passwordcheck  ("Bossart, Nathan" <bossartn@amazon.com>)
Ответы Re: [HACKERS] Enhancements to passwordcheck  ("Bossart, Nathan" <bossartn@amazon.com>)
Список pgsql-hackers
On 9/25/17 23:10, Bossart, Nathan wrote:
> One interesting design challenge will be how to handle pre-hashed
> passwords, since the number of checks we can do on those is pretty
> limited.  I'm currently thinking of a parameter that can be used to
> block, allow, or force pre-hashed passwords.

Pre-hashed passwords are the normal case.  You can't break that without
making this module a net loss in security.

-- 
Peter Eisentraut              http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services


-- 
Sent via pgsql-hackers mailing list (pgsql-hackers@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-hackers

В списке pgsql-hackers по дате отправления:

Предыдущее
От: Pavel Stehule
Дата:
Сообщение: Re: [HACKERS] logical replication and statistics
Следующее
От: Peter Eisentraut
Дата:
Сообщение: Re: [HACKERS] md5 still listed as an option in pg_hba.conf.sample