From: Dave Page <dpage@postgresql.org>
To: Magnus Hagander <magnus@hagander.net>
Cc: Tom Lane <tgl@sss.pgh.pa.us>
Cc: Tony Caduto <tony_caduto@amsoftwaredesign.com>
Cc: pgsql-general@postgresql.org
Subject: Re: Password issue revisited
Date: Tue, 20 Feb 2007 19:47:06 +0000
Message-ID: <45DB503A.3010303@postgresql.org> (raw)
In-Reply-To: <45DB4CEC.1050005@hagander.net>
References: <45BCACDB.5050702@007Marketing.com>
<200702201449.l1KEn0r21849@momjian.us>
<20070220150507.GD11927@svr2.hagander.net>
<45DB448A.3040308@amsoftwaredesign.com>
<45DB4624.4060800@hagander.net>
<18922.1171998826@sss.pgh.pa.us>
<45DB48C5.1000103@hagander.net>
<45DB4BDF.6070202@postgresql.org>
<45DB4CEC.1050005@hagander.net>
Magnus Hagander wrote:
> Dave Page wrote:
>> Magnus Hagander wrote:
>>
>>> Just to make things clear, this wouldn't be about another auth method.
>>> Windows has an API to store arbitrary passwords in a "secure way". At
>>> least it does in XP+, not sure if it was in 2000.
>> Would it really solve Tony's problem though? I'm not familiar with the
>> API you're thinking of, but do be useful to us it must be able to give
>> the unencrypted passwords back to us, and therefore anything else
>> pretending to be us.
>
> yeah, but it pops up a GUI notification for you. It's what IE uses to
> store things like passports. It's also used, IIRC, by the new RDP client
> that's available, and a few more.
> Did a quick check, and it's XP/2003 only. See
> http://msdn2.microsoft.com/en-us/library/aa302353.aspx.
That would break all the non-interactive apps that we recommend using
pgpass with to prevent storing passwords in even less secure places.
Regards, Dave.
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-docs@postgresql.org
Cc: dpage@postgresql.org, magnus@hagander.net, tgl@sss.pgh.pa.us, tony_caduto@amsoftwaredesign.com, pgsql-general@postgresql.org
Subject: Re: Password issue revisited
In-Reply-To: <45DB503A.3010303@postgresql.org>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox