Date: Fri, 24 May 2019 08:33:17 -0400
From: Stephen Frost <sfrost@snowman.net>
To: Magnus Hagander <magnus@hagander.net>
Cc: Joe Conway <mail@joeconway.com>, Tom Lane <tgl@sss.pgh.pa.us>,
	"Jonathan S. Katz" <jkatz@postgresql.org>,
	Peter Eisentraut <peter.eisentraut@2ndquadrant.com>,
	pgsql-hackers <pgsql-hackers@postgresql.org>,
	Noah Misch <noah@leadboat.com>
Subject: Re: initdb recommendations
Message-ID: <20190524123317.GW2480@tamriel.snowman.net>
References: <96389374-9454-d26d-6f79-7c7b15ec14bd@2ndquadrant.com>
 <81b36e8b-e27b-ab5d-c4f0-6493771bc0ee@postgresql.org>
 <9f46f065-ca80-f637-8c5d-a9877bcd5eab@postgresql.org>
 <10093.1558664907@sss.pgh.pa.us>
 <20190524023009.GL2480@tamriel.snowman.net>
 <df011ad3-f1a3-149e-3489-2d68e6ea21a7@joeconway.com>
 <20190524121306.GS2480@tamriel.snowman.net>
 <17041a05-0e28-f2b1-bf0c-fe375af66b45@joeconway.com>
 <20190524121904.GU2480@tamriel.snowman.net>
 <CABUevExV2YKa8cFRmFzf=cGriqhoHqwd9ev=2hWdq1kieqaV6Q@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha512;
	protocol="application/pgp-signature"; boundary="36+Jv5wzUORg1Ut4"
Content-Disposition: inline
In-Reply-To: 
 <CABUevExV2YKa8cFRmFzf=cGriqhoHqwd9ev=2hWdq1kieqaV6Q@mail.gmail.com>
User-Agent: Mutt/1.5.24 (2015-08-30)
Precedence: bulk


--36+Jv5wzUORg1Ut4
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

Greetings,

* Magnus Hagander (magnus@hagander.net) wrote:
> The thing that will potentially hit *end users* is when the RPMs, DEBs or
> Windows Installers switch to SCRAM (because of clients with older drivers).

Agreed.  I'm not sure that our change to SCRAM as default would actually
make them change...  It might, but I'm not sure and it's really a bit of
a different discussion in any case because we need to provide info about
how to go about making the migration.

> Making the default change away from trust in the source distro will affect
> few people.

Agreed.

> Making the default change of password_encryption -> scram will affect a
> *lot* of people. That one needs to be more carefully coordinated.

We need to provide better documentation about how to get from md5 to
SCRAM, in my view.  I'm not sure where that should live, exactly.
I really wish we had put more effort into making the migration easy to
do over a period of time, and we might actually have to do that before
the packagers would be willing to make that change.

Thanks,

Stephen

--36+Jv5wzUORg1Ut4
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=R8Ax
-----END PGP SIGNATURE-----

--36+Jv5wzUORg1Ut4--