pg.ddx.io  pgsql-hackers@postgresql.org mailing list archive  

help / color / mirror / Atom feed
From: Tom Lane <tgl@sss.pgh.pa.us>
To: Michael Paquier <michael.paquier@gmail.com>
Cc: Robert Haas <robertmhaas@gmail.com>
Cc: Jeff Janes <jeff.janes@gmail.com>
Cc: pgsql-hackers <pgsql-hackers@postgresql.org>
Subject: Re: scram and \password
Date: Mon, 13 Mar 2017 23:34:14 -0400
Message-ID: <743.1489462454@sss.pgh.pa.us> (raw)
In-Reply-To: <CAB7nPqTUBYwPfr4o5z+petZ+94ymGRjev1U7x0xdA8zruqtRXg@mail.gmail.com>
References: <CAMkU=1wfBgFPbfAMYZQE78p=VhZX7nN86aWkp0QcCp=+KxZ=bg@mail.gmail.com>
	<CAB7nPqSELwmfwgOt8U_rK15sHWuGeLhsWYihRtq9ADC3MZ=HTg@mail.gmail.com>
	<CA+TgmoY3VmPTn8gaKhx2fXXiMX_U2Ozf3qMXyVa+zsuMMox1HA@mail.gmail.com>
	<CAB7nPqTZNZkbezTZ3WrTBU42cAuAGjyukJAs=iw=KN4GZGoXxA@mail.gmail.com>
	<CA+TgmoYHvtOYex0N0DTm3hAvgZezZZpH789a13MzHDh_VgG9Ew@mail.gmail.com>
	<29551.1489459676@sss.pgh.pa.us>
	<CAB7nPqTUBYwPfr4o5z+petZ+94ymGRjev1U7x0xdA8zruqtRXg@mail.gmail.com>
List-Unsubscribe: <mailto:majordomo@postgresql.org?body=unsub%20pgsql-hackers>

Michael Paquier <michael.paquier@gmail.com> writes:
> On Tue, Mar 14, 2017 at 11:47 AM, Tom Lane <tgl@sss.pgh.pa.us> wrote:
>> Seems to me the intended behavior of \password is to use the best
>> available practice.  So my guess is that it ought to use SCRAM when
>> talking to a >= 10.0 server.  What the previous password was ought
>> to be irrelevant, even if it could find that out which it shouldn't
>> be able to IMO.

> And in a release or two? SCRAM being a fresh feature, switching the
> hashing now is not much a conservative approach.

If some other practice becomes better in v12, then we teach it about that
one.  It's not like psql hasn't got many other server-version-dependent
behaviors.

Alternatively, if what you mean by that is you don't trust SCRAM at all,
maybe we'd better revert the feature as not being ready for prime time.

			regards, tom lane


-- 
Sent via pgsql-hackers mailing list (pgsql-hackers@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-hackers



view thread (81+ messages)  latest in thread

Message-ID: <743.1489462454@sss.pgh.pa.us>
Permalink:  ../743.1489462454@sss.pgh.pa.us/
Also on:    postgresql.org/message-id/743.1489462454@sss.pgh.pa.us

 · 

reply
Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-hackers@postgresql.org
  Cc: tgl@sss.pgh.pa.us, michael.paquier@gmail.com, robertmhaas@gmail.com, jeff.janes@gmail.com
  Subject: Re: scram and \password
  In-Reply-To: <743.1489462454@sss.pgh.pa.us>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox