Re: AW: [HACKERS] Solution to the pg_user passwd problem !?? (c)

Bruce Momjian wrote:
>
> > > But it is not secure.  Why have passwords then?
> > >
> >       I think is better have the encrypted passwords and the salt in pg_user.
> > I don't know if this will be bing a security hole :(
> >
>
> If we do this, then what does the frontend pass us?
>
> --
> Bruce Momjian
> maillist@candle.pha.pa.us

    I was thinking in the backend pass the salt stored in pg_user to the
frontend, but doing that is (almost) the same as having the password
stored in clear text. It was a bad idea :(

    Robson.