Re: User functions for building SCRAM secrets

Поиск
Список
Период
Сортировка
От Michael Paquier
Тема Re: User functions for building SCRAM secrets
Дата
Msg-id ZDiMv+R3a+q/lpZA@paquier.xyz
обсуждение исходный текст
Ответ на Re: User functions for building SCRAM secrets  (Magnus Hagander <magnus@hagander.net>)
Ответы Re: User functions for building SCRAM secrets  (Daniel Gustafsson <daniel@yesql.se>)
Список pgsql-hackers
On Tue, Apr 11, 2023 at 11:27:17AM +0200, Magnus Hagander wrote:
> Having the function always generate a random salt seems more
> reasonable though, and would perhaps be something that helps in some
> of the cases? It won't help with the password policy one, as it's too
> secure for that, but it would help with the postgres-is-the-client
> one?

While this is still hot..  Would it make sense to have a
scram_salt_length GUC to control the length of the salt used when
generating the SCRAM secret?
--
Michael

Вложения

В списке pgsql-hackers по дате отправления:

Предыдущее
От: Daniel Gustafsson
Дата:
Сообщение: Re: [PATCH] Add `verify-system` sslmode to use system CA pool for server cert
Следующее
От: Tom Lane
Дата:
Сообщение: Re: [PATCH] Add `verify-system` sslmode to use system CA pool for server cert