On Wed, Aug 15, 2012 at 09:18:48AM -0700, Joe Conway wrote:
> The final problem as you stated is weak passwords and some kind of
> dictionary attack against a stolen set of tokens and HMACs. Didn't we
> add a hook some time ago for user provided password checker?
Yes, contrib/passwordcheck:
http://www.postgresql.org/docs/9.2/static/passwordcheck.html
-- Bruce Momjian <bruce@momjian.us> http://momjian.us EnterpriseDB
http://enterprisedb.com
+ It's impossible for everything to be true. +