Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1uJvGT-009OAC-Ke for pgsql-hackers@arkaria.postgresql.org; Tue, 27 May 2025 14:26:49 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1uJvGR-008XD0-Nt for pgsql-hackers@arkaria.postgresql.org; Tue, 27 May 2025 14:26:47 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1uJvGR-008XCs-EM for pgsql-hackers@lists.postgresql.org; Tue, 27 May 2025 14:26:47 +0000 Received: from mail-il1-x135.google.com ([2607:f8b0:4864:20::135]) by magus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.96) (envelope-from ) id 1uJvGP-000Nfm-0R for pgsql-hackers@lists.postgresql.org; Tue, 27 May 2025 14:26:47 +0000 Received: by mail-il1-x135.google.com with SMTP id e9e14a558f8ab-3dc75fe4e9bso12697045ab.0 for ; Tue, 27 May 2025 07:26:45 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1748356003; x=1748960803; darn=lists.postgresql.org; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:from:to:cc:subject:date:message-id:reply-to; bh=Sufl+sRnDJnsW+RvfBdBbBNKWWsSq26TllAR9HDGVoc=; b=Lkf+vNSodNihrWKpRGxGqX+Wd6ba+VDMFFhaZaFQJ84e8I4vwc5q+yR1QfzFXP7jY9 xRIiT2GoMPr1IPDGR+Mf73/GaE5C0P0rTvbHClcB9ZrqLcWrsO1KajQ2KitVpGV1CLpc wW3AI7IhA24M1P31YnLt5O8IKVEJD4Xea6/PkYuiS/bYMByHIv6bVm91acjAnailS5mk /7U7wA2+cuR0R3ZhsBwtEj59+zA1yQnj+iF3XzgM2UUKm97XwTHj6s+KcrYv2qGXN3XR /wlOs5aJMrUonEHP0pzwr8J/04H1g9U7eR3//HoJEV5evUnyGiApvpycMc+2LaTOWgAN 1vwA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1748356003; x=1748960803; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=Sufl+sRnDJnsW+RvfBdBbBNKWWsSq26TllAR9HDGVoc=; b=Otl6VAkQi8MtcTlSLUxPbsmJA93ne/geKwpDoasTgdGcduF9cW23WrTD/IjUtfP4ZH q/tVjEbnKghrNHwvYViF49OYEz1S4dzv7LxcDZwu/VsgC1cvZfVyRJH+VRZiheH5W6/d lGxiMnsnOf5DeV9Urcd9PCSHdcjhTcqjQlCCeHzjbagUGTFFqBDd/50AE/0ePM8qBOEA y5zP6YIq0JNyEg4etyBfv+ERuoUIx++eqFU12M7RUw62TCj1v7m2LFbqZKowKTdyNN1O xsQkCKL+EA9OCPeOqNHXVFtzDTiBx1/zX73jAYd979dmsL7Bkmg7NovrBM+pQeEzokc0 cplA== X-Gm-Message-State: AOJu0YywVYvki/Q/nCc9xJSfBI6kiDgECPTe5svGaAA5pY+Y4nplIoIU nCImNM7/6lgn+Jydadx5ibCpPaLFgoPrnBuU5be8jNnefyW1XZH43t4r X-Gm-Gg: ASbGnctJ+0C4hREjWWFse02KERWYVhQgUtzrGmzcUtbYaRCfxH8CkBtP31XQj4aBpjE LmIdLfSE5brlRLNtq/LSGphPBN8HIH37KzhRmkBzcRM1wfe1p/HaT/waikBB6wGKkU5VzT9Hpdq A5WEu3Qo9K/FK0NkiRBWh+bwv/Dr6A4M2L1zKuLIyStGHOSBmQytbdRrh4q2MOzVtfflNCRoGaH 4P+MEq5pZMeBlWXIjW8Kzm/Kj9h26ddioJjeglIt6CVKo7QtN0wHc8Vpet5ZM3c5P+sDgQ5Czhj bvdJDG+OGxOEVgb/h9jwYQyFL6pVYeEYNPfents/J2LihLO1K8LnMoojUiMj/H9ZsETu/lKDEGV ++cyqOqRNDHjm4KFzTnida6aGLwk2kOOxoDFIes1WsA== X-Google-Smtp-Source: AGHT+IFT/+ieUgTTETaRj/8VExfC5H5L6V3zWW8V4GjL8KcyfT11RCI6IBo+wd0LDaCCH/WSOrZo6w== X-Received: by 2002:a92:cb50:0:b0:3dc:9b89:6a3b with SMTP id e9e14a558f8ab-3dd8767decbmr6950955ab.8.1748356003531; Tue, 27 May 2025 07:26:43 -0700 (PDT) Received: from nathan (162-195-168-172.lightspeed.stlsmo.sbcglobal.net. [162.195.168.172]) by smtp.gmail.com with ESMTPSA id 8926c6da1cb9f-4fbcc3dddbcsm5225196173.74.2025.05.27.07.26.42 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 May 2025 07:26:43 -0700 (PDT) Date: Tue, 27 May 2025 09:26:41 -0500 From: Nathan Bossart To: Bruce Momjian Cc: PostgreSQL-development Subject: Re: PG 18 release notes draft committed Message-ID: References: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk For the "Deprecate MD5 password authentication" item, IMHO we should emphasize that support for MD5 passwords will be removed in a future major release, as we did for the 18beta1 announcement. Here's an attempt: Deprecate MD5 password authentication (Nathan Bossart) Support for MD5 passwords will be removed in a future major version release. CREATE ROLE and ALTER ROLE now emit deprecation warnings when setting MD5 passwords. These warnings can be disabled by setting the md5_password_warnings parameter to "off". -- nathan