Re: Password encryption

From: pinker <pinker(at)onet(dot)eu>
To: pgsql-docs(at)postgresql(dot)org
Subject: Re: Password encryption
Date: 2018-07-13 12:20:00
Message-ID: 1531484400661-0.post@n3.nabble.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-docs

Michael Paquier wrote
>
> A user knowing only the MD5 hash, and not the plain password would
> still be able to connect, so you really had better use SSL anyway if
> connecting with an untrusted network. Postgres 10 comes up with
> SCRAM-SHA-256 by the way, which is stronger by design for such things.

Hi, with untrusted network you mean eavesdropping or some other "evil"
technique?
With normal client like psql or pgAdmin is no way to log in having only md5
hash, right?

--
Sent from: http://www.postgresql-archive.org/PostgreSQL-docs-f2165602.html

In response to

Browse pgsql-docs by date

  From Date Subject
Next Message Bruce Momjian 2018-07-13 15:17:21 Re: Add Pgfe library to client interfaces
Previous Message Peter Eisentraut 2018-07-13 08:09:00 Re: Documented toolchain for building docs on Windows