Magnus Hagander wrote:
> This is the very reason --pwfile was added. It's not just a win32
> fix, it's a "any packager that needs to run without interactivity"
> fix. Yes, you can stick a blank password in there, but again, this is
> a choice and not a default in that case.
No, that's not what it was added for. It was added for catering to
packaging mechanisms that have other interfaces for interactivity. But
just hardcoding a default password into a package gains no security at
all.
--
Peter Eisentraut
http://developer.postgresql.org/~petere/