Re: PATCH: warn about, and deprecate, clear text passwords

From: Nathan Bossart <nathandbossart(at)gmail(dot)com>
To: Isaac Morland <isaac(dot)morland(at)gmail(dot)com>
Cc: Greg Sabino Mullane <htamfids(at)gmail(dot)com>, Aleksander Alekseev <aleksander(at)timescale(dot)com>, pgsql-hackers <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: PATCH: warn about, and deprecate, clear text passwords
Date: 2025-02-24 21:18:21
Message-ID: Z7ziHYjYGeD8DPzh@nathan
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

On Mon, Feb 24, 2025 at 04:06:41PM -0500, Isaac Morland wrote:
> And in any case I believe the existing behaviour can still be had by
> configuration so we're not really imposing anything on anybody.

Well, the discussion upthread suggests "disallowing plain text passwords
completely" [0], which means at some point we would have to impose
something, right? Again, maybe this in itself is not a deal-breaker.
After all, we'll probably have a similar problem when we eventually remove
MD5 password support down the road.

[0] https://postgr.es/m/CAKAnmmKGWxEGbvuBAxyDWmuije8agUHTY-82DR1VEkFM2vKNTg%40mail.gmail.com

--
nathan

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Greg Sabino Mullane 2025-02-24 21:20:44 Re: PATCH: warn about, and deprecate, clear text passwords
Previous Message Corey Huinker 2025-02-24 21:13:41 Re: Statistics Import and Export