Received: from localhost (maia-3.hub.org [200.46.204.184])
	by postgresql.org (Postfix) with ESMTP id 4A5709FB34B;
	Tue, 20 Feb 2007 15:32:58 -0400 (AST)
Received: from postgresql.org ([200.46.204.71])
	by localhost (mx1.hub.org [200.46.204.184]) (amavisd-new, port 10024)
	with ESMTP id 39429-04-6; Tue, 20 Feb 2007 15:32:52 -0400 (AST)
X-Greylist: from auto-whitelisted by SQLgrey-1.7.4
X-Greylist: from auto-whitelisted by SQLgrey-1.7.4
Received: from svr2.hagander.net (svr2.hagander.net [88.198.128.226])
	by postgresql.org (Postfix) with ESMTP id C74089FB2D8;
	Tue, 20 Feb 2007 15:32:53 -0400 (AST)
Received: from [192.168.199.196] (c213-100-160-41.swipnet.se [213.100.160.41])
	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
	(No client certificate requested)
	by svr2.hagander.net (Postfix) with ESMTP id 699F4DCC5C6;
	Tue, 20 Feb 2007 20:32:52 +0100 (CET)
Message-ID: <45DB4CEC.1050005@hagander.net>
Date: Tue, 20 Feb 2007 20:33:00 +0100
From: Magnus Hagander <magnus@hagander.net>
User-Agent: Thunderbird 1.5.0.9 (Windows/20061207)
MIME-Version: 1.0
To: Dave Page <dpage@postgresql.org>
CC: Tom Lane <tgl@sss.pgh.pa.us>,
	Tony Caduto <tony_caduto@amsoftwaredesign.com>,
	pgsql-general@postgresql.org
Subject: Re: Password issue revisited
References: <45BCACDB.5050702@007Marketing.com>
	<200702201449.l1KEn0r21849@momjian.us>
	<20070220150507.GD11927@svr2.hagander.net>
	<45DB448A.3040308@amsoftwaredesign.com>
	<45DB4624.4060800@hagander.net> <18922.1171998826@sss.pgh.pa.us>
	<45DB48C5.1000103@hagander.net> <45DB4BDF.6070202@postgresql.org>
In-Reply-To: <45DB4BDF.6070202@postgresql.org>
X-Enigmail-Version: 0.94.2.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
X-Virus-Scanned: Maia Mailguard 1.0.1
X-Archive-Number: 200702/1077
X-Sequence-Number: 109567

Dave Page wrote:
> Magnus Hagander wrote:
> 
>> Just to make things clear, this wouldn't be about another auth method.
>> Windows has an API to store arbitrary passwords in a "secure way". At
>> least it does in XP+, not sure if it was in 2000.
> 
> Would it really solve Tony's problem though? I'm not familiar with the
> API you're thinking of, but do be useful to us it must be able to give
> the unencrypted passwords back to us, and therefore anything else
> pretending to be us.

yeah, but it pops up a GUI notification for you. It's what IE uses to
store things like passports. It's also used, IIRC, by the new RDP client
that's available, and a few more.
Did a quick check, and it's XP/2003 only. See
http://msdn2.microsoft.com/en-us/library/aa302353.aspx.

//Magnus