Re: Password encryption

Поиск
Список
Период
Сортировка
От pinker
Тема Re: Password encryption
Дата
Msg-id 1531484400661-0.post@n3.nabble.com
обсуждение исходный текст
Ответ на Re: [DOCS] Password encryption  (Michael Paquier <michael.paquier@gmail.com>)
Список pgsql-docs
Michael Paquier wrote
> 
> A user knowing only the MD5 hash, and not the plain password would
> still be able to connect, so you really had better use SSL anyway if
> connecting with an untrusted network. Postgres 10 comes up with
> SCRAM-SHA-256 by the way, which is stronger by design for such things.

Hi, with untrusted network you mean eavesdropping or some other "evil"
technique?
With normal client like psql or pgAdmin is no way to log in having only md5
hash, right?



--
Sent from: http://www.postgresql-archive.org/PostgreSQL-docs-f2165602.html


В списке pgsql-docs по дате отправления:

Предыдущее
От: Peter Eisentraut
Дата:
Сообщение: Re: Documented toolchain for building docs on Windows
Следующее
От: Bruce Momjian
Дата:
Сообщение: Re: Add Pgfe library to client interfaces