Re: how _not_ to log?

On Fri, Jul 26, 2013 at 2:54 AM, Adrian Klaver <adrian(dot)klaver(at)gmail(dot)com> wrote:
> http://www.postgresql.org/docs/9.2/interactive/sql-alterrole.html
>
> Caution must be exercised when specifying an unencrypted password
> with this command. The password will be transmitted to the server in
> cleartext, and it might also be logged in the client's command history or
> the server log. psql contains a command \password that can be used to change
> a role's password without exposing the cleartext password.

Caution must be exercised with "encrypted" passwords too - they are
cleartext-equivalent, which means you can use them to log in,
without knowing the original password.

And the "encryption" is single md5() so the actual password
is relatively easy to crack too.

So avoiding logging them is good idea.

--
marko