From: | Bruce Momjian <bruce(at)momjian(dot)us> |
---|---|
To: | jens(dot)timmerman(at)gmail(dot)com |
Cc: | pgsql-docs(at)postgresql(dot)org |
Subject: | Re: does md5 really help against sniffing? |
Date: | 2016-08-25 22:41:43 |
Message-ID: | 20160825224143.GA26412@momjian.us |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-docs |
On Thu, Aug 25, 2016 at 03:35:17PM +0000, jens(dot)timmerman(at)gmail(dot)com wrote:
> The following documentation comment has been logged on the website:
>
> Page: https://www.postgresql.org/docs/9.1/static/auth-methods.html
> Description:
>
> this page claims
> 'If you are at all concerned about password "sniffing" attacks then md5 is
> preferred. '
> but how does this really help? If an md5 hash is enough to get access, then
> sniffing an md5has is actually the same as sniffing the password?'
There is random salt added to the network md5 hash. Please read the
docs on this.
--
Bruce Momjian <bruce(at)momjian(dot)us> http://momjian.us
EnterpriseDB http://enterprisedb.com
+ As you are, so once was I. As I am, so you will be. +
+ Ancient Roman grave inscription +
From | Date | Subject | |
---|---|---|---|
Next Message | Tom Lane | 2016-08-26 13:07:14 | Re: undocumented feature or bug in subquery : psql (PostgreSQL) 9.4.6 on SLES12 SP1 |
Previous Message | Tom Lane | 2016-08-25 16:33:01 | Re: Order of Operations for Update Command |