Re: removal of md5 from example code

From: Peter Eisentraut <peter(dot)eisentraut(at)2ndquadrant(dot)com>
To: jonwolski(at)gmail(dot)com, pgsql-docs(at)lists(dot)postgresql(dot)org
Subject: Re: removal of md5 from example code
Date: 2018-02-22 18:28:18
Message-ID: 240575e3-3734-a5c2-eb1a-543715b9c7c7@2ndquadrant.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-docs

On 1/17/18 11:14, PG Doc comments form wrote:
> The documentation at
> https://www.postgresql.org/docs/current/static/citext.html shows an example
> using md5 for password hashes. This is generally a bad practice and not
> relevant to the feature documented.
>
> I recommend removing the password column from this example or replacing the
> md5 hash with something more secure (a secure hash algorithm with a salt).

This has been fixed in the master branch.

--
Peter Eisentraut http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services

In response to

Browse pgsql-docs by date

  From Date Subject
Next Message PG Doc comments form 2018-02-22 19:50:19 Documentation of FOR ROLE clause of ALTER DEFAULT PRIVILEGES missing
Previous Message legrand legrand 2018-02-21 22:38:24 Re: trigger audit logon