Re: worried about PGPASSWORD drop

Christoph Dalitz <christoph.dalitz@hs-niederrhein.de> writes:
> In the TODO list on http://developer.postgresql.org/todo.php,
> I found the following entry:
>  - Remove PGPASSWORD because it is insecure on some OS's, in 7.4
> Why?

I don't agree with removing the feature either, since it's perfectly
useful on many OSes.  However your assumption:

>  - The alternative (a new command line option for password)

is completely wrong; that is not the alternative being introduced.
See http://candle.pha.pa.us/main/writings/pgsql/sgml/libpq-envars.html

            regards, tom lane