Re: crypt and MD5 - still not wanted

From: Vince Vielhaber <vev(at)michvhf(dot)com>
To: Peter Eisentraut <peter_e(at)gmx(dot)net>
Cc: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, Karel Zak <zakkr(at)zf(dot)jcu(dot)cz>, pgsql-hackers <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: crypt and MD5 - still not wanted
Date: 2000-07-08 14:50:23
Message-ID: Pine.BSF.4.21.0007081048540.81653-100000@paprika.michvhf.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

On Sat, 8 Jul 2000, Peter Eisentraut wrote:

> Vince Vielhaber writes:
>
> > On Fri, 7 Jul 2000, Tom Lane wrote:
> >
> > > If I recall the prior discussion, MD5 is OK, crypt is still risky,
> > > because MD5 is not an encryption algorithm so it doesn't fall under
> > > the US export laws.
> > >
> > > I believe Vince V. is working on improving the password challenge
> > > code to use MD5, btw.
> >
> > yep.
>
> If you do that, maybe also look at the secondary password files. We
> probably don't want those using a different encryption method.
>
>
> (backward compatibility alarm goes off in the distance...)

Already thinking about that.

Vince.
--
==========================================================================
Vince Vielhaber -- KA8CSH email: vev(at)michvhf(dot)com http://www.pop4.net
128K ISDN from $22.00/mo - 56K Dialup from $16.00/mo at Pop4 Networking
Online Campground Directory http://www.camping-usa.com
Online Giftshop Superstore http://www.cloudninegifts.com
==========================================================================

In response to

Browse pgsql-hackers by date

  From Date Subject
Next Message Bruce Momjian 2000-07-08 15:03:07 Re: fcntl(SETLK) [was Re: 2nd update on TOAST]
Previous Message Peter Eisentraut 2000-07-08 14:31:27 Re: Re: postgres TODO