pg.ddx.io  pgsql-admin@postgresql.org mailing list archive  

help / color / mirror / Atom feed
From: Scott Ribe <scott_ribe@elevated-dev.com>
To: Tom Lane <tgl@sss.pgh.pa.us>
Cc: Magnus Hagander <magnus@hagander.net>
Cc: Laurenz Albe <laurenz.albe@cybertec.at>
Cc: Daulat <daulat.dba@gmail.com>
Cc: pgsql-admin <pgsql-admin@lists.postgresql.org>
Subject: Re: Password complexities in Postgres v14.6
Date: Fri, 16 Dec 2022 09:25:57 -0700
Message-ID: <B5EB213A-CE37-44E0-BCB3-9456C1D8FDE9@elevated-dev.com> (raw)
In-Reply-To: <3682760.1671207449@sss.pgh.pa.us>
References: <CALfOM6LjVBhpHg+6nVe6reOBYdPJZXvXhkp+dqquG9cVBsGPmQ@mail.gmail.com>
	<2192ed923b577ce4a8a90479c7ed1c97f7a6523d.camel@cybertec.at>
	<3675887.1671203806@sss.pgh.pa.us>
	<CABUevExd8w-o1_SAbc3-1kRKbGFJP2S_86jvVFpqbWr_VPfVYA@mail.gmail.com>
	<3682760.1671207449@sss.pgh.pa.us>

> On Dec 16, 2022, at 9:17 AM, Tom Lane <tgl@sss.pgh.pa.us> wrote:
> 
> ...

> (I agree that forced password rotations are also an obsolete security
> practice, but figured that one bit of push-back at a time was enough.)

I believe that NIST is now on board with this opinion, aren't they?






view thread (12+ messages)  latest in thread

Message-ID: <B5EB213A-CE37-44E0-BCB3-9456C1D8FDE9@elevated-dev.com>
Permalink:  ../B5EB213A-CE37-44E0-BCB3-9456C1D8FDE9@elevated-dev.com/
Also on:    postgresql.org/message-id/B5EB213A-CE37-44E0-BCB3-9456C1D8FDE9@elevated-dev.com

 · 

reply
Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-admin@postgresql.org
  Cc: scott_ribe@elevated-dev.com, tgl@sss.pgh.pa.us, magnus@hagander.net, laurenz.albe@cybertec.at, daulat.dba@gmail.com, pgsql-admin@lists.postgresql.org
  Subject: Re: Password complexities in Postgres v14.6
  In-Reply-To: <B5EB213A-CE37-44E0-BCB3-9456C1D8FDE9@elevated-dev.com>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox