On 02.03.22 16:45, Jonathan S. Katz wrote:
> By that argument, we should have kept "password" (plain) as an
> authentication method.
For comparison, the time between adding md5 and removing password was 16
years. It has been 5 years since scram was added.