Re: Successor of MD5 authentication, let's use SCRAM

Поиск
Список
Период
Сортировка
От Robert Haas
Тема Re: Successor of MD5 authentication, let's use SCRAM
Дата
Msg-id CA+TgmoZ4R_-4qywbYbbDJGE5LjkizyYCg-VGoyCBBTu8t8L=RA@mail.gmail.com
обсуждение исходный текст
Ответ на Re: Successor of MD5 authentication, let's use SCRAM  (Magnus Hagander <magnus@hagander.net>)
Ответы Re: Successor of MD5 authentication, let's use SCRAM  (Greg Stark <stark@mit.edu>)
Список pgsql-hackers
On Thu, Sep 12, 2013 at 11:33 AM, Magnus Hagander <magnus@hagander.net> wrote:
> Well, undocumented and OpenSSL tend to go hand in hand a lot. Or,
> well, it might be documented, but not in a useful way. I wouldn't
> count on it.

The OpenSSL code is some of the worst-formatted spaghetti code I've
ever seen, and the reason I know that is because whenever I try to do
anything with OpenSSL I generally end up having to read it, precisely
because, as you say, the documentation is extremely incomplete.  I
hate to be critical of other projects, but everything I've ever done
with OpenSSL has been difficult, and I really think we should try to
get less dependent on it rather than more.

> I fear starting to use that is going to make it even harder to break
> out from our openssl dependency, which people do complain about at
> least semi-regularly.

+1.

-- 
Robert Haas
EnterpriseDB: http://www.enterprisedb.com
The Enterprise PostgreSQL Company



В списке pgsql-hackers по дате отправления:

Предыдущее
От: Merlin Moncure
Дата:
Сообщение: Re: proposal: Set effective_cache_size to greater of .conf value, shared_buffers
Следующее
От: Robert Haas
Дата:
Сообщение: Re: Possible memory leak with SQL function?