Re: reducing our reliance on MD5

Heikki Linnakangas <hlinnakangas@vmware.com> writes:
> On 02/11/2015 03:52 PM, Robert Haas wrote:
>> So are you thinking to integrate with the Cyrus SASL library, or do
>> you have another thought?

> I think we need to implement the primary MD5 replacement ourselves, so 
> that it's always available without extra libraries. Otherwise it will 
> not get much adoption, or the extra dependency will be a hassle anyway. 

+1

> We could also support using a library like that for additional 
> authentication mechanisms, though, for those who really need them.

We've already got a sufficiency of external authentication mechanisms.
If people wanted to use non-built-in authentication, we'd not be having
this discussion.
        regards, tom lane