Re: Re: Encrypting pg_shadow passwords

Hi -

tgl wrote:
: > Oh, I see finally.  You already put a custom little
: > challenge/response authentication scheme into postgresql,
: [...]
: Long before any of the current generation of developers, AFAIK.

Okay.  (Sorry about misinferring "You" above!)


: In any case, as several people have pointed out, one may well want to
: guard one's password more carefully than one guards the entire session
: contents.  Running SSL on a session that may transfer many megabytes
: is a lot of overhead.

Sure, but that's a separate performance question that shouldn't affect
the logical layering of the mechanisms.  With SSL, for example, methinks
it's possible to renegotiate a connection to turn off encryption after
a certain point.


- FChE