| From: | Bruce Momjian <pgman(at)candle(dot)pha(dot)pa(dot)us> |
|---|---|
| To: | "Robert B(dot) Easter" <reaster(at)comptechnews(dot)com> |
| Cc: | Benjamin Adida <ben(at)mit(dot)edu>, pgsql-hackers(at)postgreSQL(dot)org |
| Subject: | Re: You're on SecurityFocus.com for the cleartext passwords. |
| Date: | 2000-05-07 03:14:52 |
| Message-ID: | 200005070314.XAA27979@candle.pha.pa.us |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-general pgsql-hackers |
> OpenSSL is under the BSD license (www.openssl.org). Its source code can be
> integrated into the PostgreSQL source code so that users need know nothing
> about it. It would just get used internal to Postgres and the client
> libraries.
>
> OpenSSL also contains an MD5 routine that can be used on the passwords.
>
> So far, no one is excited about this so I will not push it anymore.
Seems like that could be a solution, but we are trying not to bloat the
PostgreSQL tarball. Shipping SSH would certainly do that.
--
Bruce Momjian | http://www.op.net/~candle
pgman(at)candle(dot)pha(dot)pa(dot)us | (610) 853-3000
+ If your life is a hard drive, | 830 Blythe Avenue
+ Christ can be your backup. | Drexel Hill, Pennsylvania 19026
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Bruce Momjian | 2000-05-07 03:21:11 | Re: So we're in agreement.... |
| Previous Message | Bruce Momjian | 2000-05-07 03:11:35 | Re: You're on SecurityFocus.com for the cleartext passwords. |
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Bruce Momjian | 2000-05-07 03:21:11 | Re: So we're in agreement.... |
| Previous Message | Bruce Momjian | 2000-05-07 03:11:35 | Re: You're on SecurityFocus.com for the cleartext passwords. |