Received: from localhost (maia-4.hub.org [200.46.204.183])
	by postgresql.org (Postfix) with ESMTP id 121839FB287
	for <pgsql-general-postgresql.org@postgresql.org>;
	Tue, 20 Feb 2007 15:28:39 -0400 (AST)
Received: from postgresql.org ([200.46.204.71])
	by localhost (mx1.hub.org [200.46.204.183]) (amavisd-new, port 10024)
	with ESMTP id 51224-07 for
	<pgsql-general-postgresql.org@postgresql.org>;
	Tue, 20 Feb 2007 15:28:37 -0400 (AST)
X-Greylist: from auto-whitelisted by SQLgrey-1.7.4
Received: from developer.pgadmin.org (developer.pgadmin.org [63.246.23.140])
	by postgresql.org (Postfix) with ESMTP id 870C49FA1FD
	for <pgsql-general@postgresql.org>;
	Tue, 20 Feb 2007 15:28:36 -0400 (AST)
Received: from [172.16.0.68] ([89.241.201.125]) (authenticated bits=0)
	by developer.pgadmin.org (8.13.8/8.13.8) with ESMTP id l1KJ35Qg021690
	(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO);
	Tue, 20 Feb 2007 19:03:06 GMT
Message-ID: <45DB4BDF.6070202@postgresql.org>
Date: Tue, 20 Feb 2007 19:28:31 +0000
From: Dave Page <dpage@postgresql.org>
User-Agent: Thunderbird 1.5.0.9 (Macintosh/20061207)
MIME-Version: 1.0
To: Magnus Hagander <magnus@hagander.net>
CC: Tom Lane <tgl@sss.pgh.pa.us>,
	Tony Caduto <tony_caduto@amsoftwaredesign.com>,
	pgsql-general@postgresql.org
Subject: Re: Password issue revisited
References: <45BCACDB.5050702@007Marketing.com>
	<200702201449.l1KEn0r21849@momjian.us>
	<20070220150507.GD11927@svr2.hagander.net>
	<45DB448A.3040308@amsoftwaredesign.com>
	<45DB4624.4060800@hagander.net> <18922.1171998826@sss.pgh.pa.us>
	<45DB48C5.1000103@hagander.net>
In-Reply-To: <45DB48C5.1000103@hagander.net>
X-Enigmail-Version: 0.94.1.2
OpenPGP: url=http://www.pgadmin.org/pgp/davepage.pgp
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
X-Virus-Scanned: Maia Mailguard 1.0.1
X-Archive-Number: 200702/1075
X-Sequence-Number: 109565

Magnus Hagander wrote:

> Just to make things clear, this wouldn't be about another auth method.
> Windows has an API to store arbitrary passwords in a "secure way". At
> least it does in XP+, not sure if it was in 2000.

Would it really solve Tony's problem though? I'm not familiar with the
API you're thinking of, but do be useful to us it must be able to give
the unencrypted passwords back to us, and therefore anything else
pretending to be us.

Regards, Dave.