Date: Sun, 20 Dec 2020 19:58:26 -0500
From: Stephen Frost <sfrost@snowman.net>
To: Magnus Hagander <magnus@hagander.net>
Cc: Thomas Munro <thomas.munro@gmail.com>, k.yudhveer@gmail.com,
	PostgreSQL mailing lists <pgsql-bugs@lists.postgresql.org>
Subject: Re: BUG #16079: Question Regarding the BUG #16064
Message-ID: <20201221005825.GQ16415@tamriel.snowman.net>
References: <16079-29e9c038e1463751@postgresql.org>
 <20191028154754.GS6962@tamriel.snowman.net>
 <CA+hUKGJw4Ax25=fcCA+DQD=82v2pKu9VGmkYZO8HeH7+-P2Cxw@mail.gmail.com>
 <CABUevEwMcFmXqPJgOQfnUV8XgKtWqHPiccNHY+mPJ0AfeFz-7Q@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha512;
	protocol="application/pgp-signature"; boundary="Y10lCialaRXjIaJg"
Content-Disposition: inline
In-Reply-To: 
 <CABUevEwMcFmXqPJgOQfnUV8XgKtWqHPiccNHY+mPJ0AfeFz-7Q@mail.gmail.com>
User-Agent: Mutt/1.5.24 (2015-08-30)
Precedence: bulk


--Y10lCialaRXjIaJg
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Greetings,

* Magnus Hagander (magnus@hagander.net) wrote:
> On Fri, Nov 15, 2019 at 5:42 AM Thomas Munro <thomas.munro@gmail.com> wro=
te:
> > On Tue, Oct 29, 2019 at 4:48 AM Stephen Frost <sfrost@snowman.net> wrot=
e:
> > > Uh, the user's credentials certainly are sent to the PG server.
> >
> > Perhaps we should log a warning when PostgreSQL has received a
> > password over the network without SSL.  Perhaps we should log another
> > warning when PostgreSQL has sent a password over the network without
> > SSL.
>=20
> For the old plaintext "password" method, we log a warning when we parse t=
he
> configuration file.
>=20
> Maybe we should do the same for LDAP (and RADIUS)? This seems like a bett=
er
> place to put it than to log it at every time it's received?

A dollar short and a year late, but ... +1.

Thanks,

Stephen

--Y10lCialaRXjIaJg
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=AFJi
-----END PGP SIGNATURE-----

--Y10lCialaRXjIaJg--