Re: You're on SecurityFocus.com for the cleartext passwords.

From: Bruce Momjian <pgman(at)candle(dot)pha(dot)pa(dot)us>
To: Vince Vielhaber <vev(at)michvhf(dot)com>
Cc: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, The Hermit Hacker <scrappy(at)hub(dot)org>, "Sverre H(dot) Huseby" <sverrehu(at)online(dot)no>, pgsql-hackers(at)postgresql(dot)org
Subject: Re: You're on SecurityFocus.com for the cleartext passwords.
Date: 2000-05-06 15:48:41
Message-ID: 200005061548.LAA12370@candle.pha.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general pgsql-hackers

> > This has the huge advantage of not requiring any new crypting methods on
> > the client. It only requires the crypt to happen twice using two
> > different salts.
> >
> > Sounds like a winner. Comments?
>
> Overlycomplicated?
>
> What was your objection to MD5 again?

Not really. We are using our same unix crypt code, which works on all
platforms. The change to each interface is minimal. Not much testing
will be required.

--
Bruce Momjian | http://www.op.net/~candle
pgman(at)candle(dot)pha(dot)pa(dot)us | (610) 853-3000
+ If your life is a hard drive, | 830 Blythe Avenue
+ Christ can be your backup. | Drexel Hill, Pennsylvania 19026

In response to

Browse pgsql-general by date

  From Date Subject
Next Message Bruce Momjian 2000-05-06 15:54:03 Re: You're on SecurityFocus.com for the cleartext passwords.
Previous Message Vince Vielhaber 2000-05-06 15:38:03 Re: You're on SecurityFocus.com for the cleartext passwords.

Browse pgsql-hackers by date

  From Date Subject
Next Message Bruce Momjian 2000-05-06 15:54:03 Re: You're on SecurityFocus.com for the cleartext passwords.
Previous Message Vince Vielhaber 2000-05-06 15:38:03 Re: You're on SecurityFocus.com for the cleartext passwords.