Re: sunsetting md5 password support

From: Nathan Bossart <nathandbossart(at)gmail(dot)com>
To: Jim Nasby <jnasby(at)upgrade(dot)com>
Cc: Greg Sabino Mullane <htamfids(at)gmail(dot)com>, Andrew Dunstan <andrew(at)dunslane(dot)net>, Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, Heikki Linnakangas <hlinnaka(at)iki(dot)fi>, pgsql-hackers <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: sunsetting md5 password support
Date: 2024-10-29 01:06:07
Message-ID: ZyA0_8P8F3WHWnFu@nathan
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

On Mon, Oct 28, 2024 at 04:10:29PM -0500, Jim Nasby wrote:
> Patch itself looks good, but it does leave me wondering if cleartext
> should also be deprecated?

I see that Tom has already chimed in on this point. In any case, this is
probably a topic for another thread.

> Might also be worth mentioning deprecation in pg_hba.conf.

Yeah. I vaguely recall waffling on whether to add one there, and for
whatever reason, I decided against it. I've added it in v4.

--
nathan

Attachment Content-Type Size
v4-0001-Deprecate-MD5-passwords.patch text/plain 16.9 KB

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Michael Paquier 2024-10-29 01:24:59 Re: ActiveState Perl is not valid anymore to build PG17 on the Windows 10/11 platforms, So Documentation still suggesting it should be updated
Previous Message David Rowley 2024-10-29 01:03:08 Re: EXPLAIN IndexOnlyScan shows disabled when enable_indexonlyscan=on