Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lf10z-00019z-Pl for pgsql-admin@arkaria.postgresql.org; Fri, 07 May 2021 13:59:37 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1lf10y-0007PD-IU for pgsql-admin@arkaria.postgresql.org; Fri, 07 May 2021 13:59:36 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lf10y-0007P4-9S for pgsql-admin@lists.postgresql.org; Fri, 07 May 2021 13:59:36 +0000 Received: from mailout.easymail.ca ([64.68.200.34]) by magus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lf10w-00061S-6e for pgsql-admin@lists.postgresql.org; Fri, 07 May 2021 13:59:35 +0000 Received: from localhost (localhost [127.0.0.1]) by mailout.easymail.ca (Postfix) with ESMTP id 12A8DC11D6; Fri, 7 May 2021 13:59:31 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at emo04-pco.easydns.vpn Received: from mailout.easymail.ca ([127.0.0.1]) by localhost (emo04-pco.easydns.vpn [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ABnWGu_38LO1; Fri, 7 May 2021 13:59:30 +0000 (UTC) Received: from smtpclient.apple (unknown [4.28.96.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mailout.easymail.ca (Postfix) with ESMTPSA id 6B008C0DB0; Fri, 7 May 2021 13:59:29 +0000 (UTC) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 14.0 \(3654.80.0.2.43\)) Subject: Re: Query on User account password change details From: Scott Ribe In-Reply-To: <1d0196b7-01e2-e979-e023-d684331db8ea@gmail.com> Date: Fri, 7 May 2021 07:59:27 -0600 Cc: pgsql-admin@lists.postgresql.org Content-Transfer-Encoding: quoted-printable Message-Id: <7D7F4D74-DCE1-406B-A24D-62AA50890BB1@elevated-dev.com> References: <90B6B3A1-BB95-4D69-99EF-D86C0A859431@jakobs.com> <4e87a433-531f-d108-4ef6-0c54ba44f587@gmail.com> <1d0196b7-01e2-e979-e023-d684331db8ea@gmail.com> To: Ron X-Mailer: Apple Mail (2.3654.80.0.2.43) List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk On May 7, 2021, at 7:55 AM, Ron wrote: >=20 > The problem is that Postgresql allows Really Short Passwords without = uttering a peep, and that's not defensible to an auditor. fair point