From: Klaus Sonnenleiter <klaus@sonnenleiter.com>
To: Tim Ellis <Tim.Ellis@gamet.com>
To: Stefan Fiel <fstefan@cable.vol.at>
Cc: pgsql-admin@postgresql.org
Subject: Re: password encryption
Date: Wed, 21 Aug 2002 20:55:19 -0400
Message-ID: <200208212055.19700.klaus@sonnenleiter.com> (raw)
In-Reply-To: <20020821173638.4428eb90.Tim.Ellis@gamet.com>
References: <5.1.0.14.0.20020820115452.03ed0a28@mail.cable.vol.at>
<20020821173638.4428eb90.Tim.Ellis@gamet.com>
To protect your passwords effectively, you probably want them encrypted before
they go on the wire, so you will need to put the encryption capability in the
application, not in the database. This way you will only transmit and store
encrypted data. Take a look at cryptix.org for some pretty good Java and Perl
implementations.
On Wednesday 21 August 2002 05:36, Tim Ellis wrote:
> > i like to store passwords for a webapplication in my postgre database.
> >
> > now i'm searching for a way to encrypt the passwords, something like the
> > function password() for mysql.
>
> I always run my passwords through md5sum(), which is an open source
> implementation, and thus seems to've been written in every language out
> there.
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: klaus@sonnenleiter.com, Tim.Ellis@gamet.com, fstefan@cable.vol.at
Subject: Re: password encryption
In-Reply-To: <200208212055.19700.klaus@sonnenleiter.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox