Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1kCoQW-00087l-U8 for pgsql-admin@arkaria.postgresql.org; Mon, 31 Aug 2020 18:21:08 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1kCoQV-0005bk-Sg for pgsql-admin@arkaria.postgresql.org; Mon, 31 Aug 2020 18:21:07 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1kCoQV-0005bd-LG for pgsql-admin@lists.postgresql.org; Mon, 31 Aug 2020 18:21:07 +0000 Received: from sss.pgh.pa.us ([66.207.139.130]) by magus.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1kCoQT-0003iT-Hr for pgsql-admin@lists.postgresql.org; Mon, 31 Aug 2020 18:21:07 +0000 Received: from sss1.sss.pgh.pa.us (localhost [127.0.0.1]) by sss.pgh.pa.us (8.15.2/8.15.2) with ESMTP id 07VIL3HS4123591; Mon, 31 Aug 2020 14:21:03 -0400 From: Tom Lane To: Stephen Frost cc: Nicholas Chammas , pgsql-admin@lists.postgresql.org Subject: Re: Amazon RDS auth tokens in .pgpass In-reply-to: <20200831181648.GT29590@tamriel.snowman.net> References: <4119486.1598897040@sss.pgh.pa.us> <20200831181648.GT29590@tamriel.snowman.net> Comments: In-reply-to Stephen Frost message dated "Mon, 31 Aug 2020 14:16:48 -0400" MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-ID: <4123589.1598898063.1@sss.pgh.pa.us> Date: Mon, 31 Aug 2020 14:21:03 -0400 Message-ID: <4123590.1598898063@sss.pgh.pa.us> List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk Stephen Frost writes: > My memory might be faulty, but I've got some specific recollection of > people complaining about this before and the community response being > "who would ever need such very long things?!" Yeah, so I guessed wrong ;-). Never too late to absorb new facts though. That thread does point out that passwordFromFile() is far from the only place that assumes passwords aren't going to be longer than what would be sane to enter manually. I wonder whether we need to worry about the other bottlenecks. regards, tom lane