Re: You're on SecurityFocus.com for the cleartext passwords.

Поиск
Список
Период
Сортировка
От Vince Vielhaber
Тема Re: You're on SecurityFocus.com for the cleartext passwords.
Дата
Msg-id Pine.BSF.4.21.0005061206420.13987-100000@paprika.michvhf.com
обсуждение исходный текст
Ответ на Re: You're on SecurityFocus.com for the cleartext passwords.  (Bruce Momjian <pgman@candle.pha.pa.us>)
Ответы Re: You're on SecurityFocus.com for the cleartext passwords.  (Bruce Momjian <pgman@candle.pha.pa.us>)
Re: You're on SecurityFocus.com for the cleartext passwords.  (Bruce Momjian <pgman@candle.pha.pa.us>)
Список pgsql-hackers
On Sat, 6 May 2000, Bruce Momjian wrote:

> > > Sounds like a winner.  Comments?
> > 
> > Overlycomplicated?
> > 
> > What was your objection to MD5 again?
> 
> Also, MD5 is not ideal for passwords.  Seems the standard unix-style
> password crypting is the standard, so it should be used to crypt our own
> passwords in pg_shadow.  I am sure someone would find some problem with
> us using md5 for password storage.

FreeBSD uses MD5 by default since at least ver 2.2, possibly earlier.
> We already use the unix-style password crypt to send passwords over the
> wire.  Why not use it for storage too?

Can ALL clients we support use it over the wire?  

Vince.
-- 
==========================================================================
Vince Vielhaber -- KA8CSH    email: vev@michvhf.com    http://www.pop4.net128K ISDN from $22.00/mo - 56K Dialup from
$16.00/moat Pop4 Networking       Online Campground Directory    http://www.camping-usa.com      Online Giftshop
Superstore   http://www.cloudninegifts.com
 
==========================================================================





В списке pgsql-hackers по дате отправления:

Предыдущее
От: Bruce Momjian
Дата:
Сообщение: Re: You're on SecurityFocus.com for the cleartext passwords.
Следующее
От: Bruce Momjian
Дата:
Сообщение: Re: You're on SecurityFocus.com for the cleartext passwords.