From: Bruce Momjian <pgman@candle.pha.pa.us>
To: Klaus Sonnenleiter <klaus@sonnenleiter.com>
Cc: Tim Ellis <Tim.Ellis@gamet.com>
Cc: Stefan Fiel <fstefan@cable.vol.at>
Cc: pgsql-admin@postgresql.org
Subject: Re: password encryption
Date: Wed, 21 Aug 2002 22:11:42 -0400 (EDT)
Message-ID: <200208220211.g7M2Bhr22874@candle.pha.pa.us> (raw)
In-Reply-To: <200208212055.19700.klaus@sonnenleiter.com>
See contrib/pg_crypto for encryption routines you can load into the
database.
---------------------------------------------------------------------------
Klaus Sonnenleiter wrote:
> To protect your passwords effectively, you probably want them encrypted before
> they go on the wire, so you will need to put the encryption capability in the
> application, not in the database. This way you will only transmit and store
> encrypted data. Take a look at cryptix.org for some pretty good Java and Perl
> implementations.
>
> On Wednesday 21 August 2002 05:36, Tim Ellis wrote:
> > > i like to store passwords for a webapplication in my postgre database.
> > >
> > > now i'm searching for a way to encrypt the passwords, something like the
> > > function password() for mysql.
> >
> > I always run my passwords through md5sum(), which is an open source
> > implementation, and thus seems to've been written in every language out
> > there.
>
> ---------------------------(end of broadcast)---------------------------
> TIP 2: you can get off all lists at once with the unregister command
> (send "unregister YourEmailAddressHere" to majordomo@postgresql.org)
>
--
Bruce Momjian | http://candle.pha.pa.us
pgman@candle.pha.pa.us | (610) 359-1001
+ If your life is a hard drive, | 13 Roberts Road
+ Christ can be your backup. | Newtown Square, Pennsylvania 19073
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: pgman@candle.pha.pa.us, klaus@sonnenleiter.com, Tim.Ellis@gamet.com, fstefan@cable.vol.at
Subject: Re: password encryption
In-Reply-To: <200208220211.g7M2Bhr22874@candle.pha.pa.us>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox