Re: [pgadmin-hackers] Client-side password encryption

Поиск
Список
Период
Сортировка
От Christopher Kings-Lynne
Тема Re: [pgadmin-hackers] Client-side password encryption
Дата
Msg-id 43A767F0.3020603@familyhealth.com.au
обсуждение исходный текст
Ответ на Re: [pgadmin-hackers] Client-side password encryption  (Alvaro Herrera <alvherre@commandprompt.com>)
Список pgsql-hackers
>>I've already implemented this in phpPgAdmin trivially using the md5() 
>>function.  I can't be bothered using a C library function :D
> 
> IIRC the whole point of this exercise was to avoid passing the password
> to the server in the first place.  Unless you are talking about a PHP
> md5() password of course ...

Yes...

However of course in phpPgAdmin the password has already been sent 
cleartext to the webserver from your browser, and the database 
connection password parameter is still sent in the clear so...

Chris



В списке pgsql-hackers по дате отправления:

Предыдущее
От: Alvaro Herrera
Дата:
Сообщение: Re: [pgadmin-hackers] Client-side password encryption
Следующее
От: Tom Lane
Дата:
Сообщение: Re: Lock issue when trying to vacuum db