Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1vqww2-003qY6-2V for pgsql-hackers@arkaria.postgresql.org; Fri, 13 Feb 2026 17:26:31 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.96) (envelope-from ) id 1vqww1-00FamJ-3C for pgsql-hackers@arkaria.postgresql.org; Fri, 13 Feb 2026 17:26:30 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1vqww1-00FamB-2F for pgsql-hackers@lists.postgresql.org; Fri, 13 Feb 2026 17:26:30 +0000 Received: from mail-ot1-x343.google.com ([2607:f8b0:4864:20::343]) by makus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.98.2) (envelope-from ) id 1vqww0-00000000Thb-0AGk for pgsql-hackers@postgresql.org; Fri, 13 Feb 2026 17:26:29 +0000 Received: by mail-ot1-x343.google.com with SMTP id 46e09a7af769-7d1890f7ee4so707175a34.0 for ; Fri, 13 Feb 2026 09:26:28 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1771003588; x=1771608388; darn=postgresql.org; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:from:to:cc:subject:date:message-id:reply-to; bh=pMPTFts5rPULoM01SIfoHvFAHN2uRmNTc81pnMMW04U=; b=f0PU35+3zj88kVijIQwT1E8/unTsirutTniDaOlH/zuz+9weFvxmO5mvdW/8zJO6Yh JsmSaExXJl3rInK8/5Uqz6VU6G5+8pEJJlGeh+sLepsXt6o1IifItnMGF23gCEwPwmsL i9iwHUfaTkb+D5sSFS+DIU5ni9eLwnCBXiqN6ES0jGnsnn6IvSTEMUQTdyJXCQF8dfUx 73qx/tnHXtEyJMW1AVtdV3GRAdK9B5T5qRcxDLrrT+zXqzxinEHc0q9tJZRGIlDdiD1+ 4vSGRUwfZaIKoQUjbSgrzKa2I0GH1FjB4yBDDFDXD/oDwlSPJGisxWzNfYJyg+ia88gm LXIw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1771003588; x=1771608388; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:x-gm-gg:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=pMPTFts5rPULoM01SIfoHvFAHN2uRmNTc81pnMMW04U=; b=hfI9jzMH7Oo3PXlpvm7PU4fiK9kag6kgdWhDHJfp68tWZbHOCZecscCPNC1goNcdZK SdZivPML6JAsYBjOfwYzY0rOeKfSW/wm7ySXPTGi2j7Uc0kXkrKujYXD7LfwkZQPsX/s Gk27mdEbLERncFi8JUMU0lvuZOIQbb3oDsQDYEeZTh5OBe3m5RNJ54W24k2unIG+u819 yRX84ILjo+nWTqMelhTb6ktZdNdfPP83CNXHTAWvAkYJeZkGIPvU3iGCDNOvlUalbSOk uPR7q7QVhCojp8HC19mepqX1L11j/0npwYG9x//in1xt2qJUc9/x6/9ONGc8iYlHfVKu ueoQ== X-Gm-Message-State: AOJu0YxlFqmzAiAMq4Gy1lE/tGhOYXGY67Zv1/IwIzbpXwyIl13vDtyP b5WrNjxXKiOhbisoovbNq9VKSpqXIvlaGD36M8Re150eHiN2Ztsi0O3r0Ti6P77p X-Gm-Gg: AZuq6aLQXYWSUyqcx6KN+iR2E5aNfz5VJwBmaW3ndtIB1dUDtiQoL+kvL4FtDpswdLk /P9H0RoFTDnmt06742KM8H7CJPS7XLxdGqi4DNIjKjLfymBraf4PKVCOiQhvZ4xEoyZM9QG3ORS 9lv4zQrDWY5qpyy1cB3hwC6CxWw1YWOKOoy8SbG1y+2euI2ZmD99K0ZINWFLY5hs8QbLKbsjUV7 JLp3i3Vo7fWVfzuOW3CinPPUrdPA6i4BJh2tm+PRlpsMEDL+sYLGFvPNh8R46BGSjIKGCNdzZpC ty4Jly+QHUgZ1i7CCf7awKCOwgTRCXvaUDDIjbmNQQKzvqf8q7m+yUm6E1lEGLYI01GJri0eRKF EFsKD09S62S+xYTDh/BBhhezSnMpYKc1DQClI1Trx6lKSAoXm6R9pquW/HrpAsjGB6uNvsz63D1 OP+iG2JMdEO1cithKPFFQIdelFZsrC9kBmQE5232DEuFuHW1tVU9VkKnlZkwR/WfO/0j4X8/fle /DhFpejrycnRkAX X-Received: by 2002:a05:6830:2a03:b0:7cf:da36:4c7e with SMTP id 46e09a7af769-7d4c2fe5e3dmr2260154a34.8.1771003588220; Fri, 13 Feb 2026 09:26:28 -0800 (PST) Received: from nathan (162-195-168-172.lightspeed.stlsmo.sbcglobal.net. [162.195.168.172]) by smtp.gmail.com with ESMTPSA id 46e09a7af769-7d4a771c495sm6307376a34.26.2026.02.13.09.26.27 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 13 Feb 2026 09:26:27 -0800 (PST) Date: Fri, 13 Feb 2026 11:26:26 -0600 From: Nathan Bossart To: Andreas Karlsson Cc: pgsql-hackers@postgresql.org Subject: Re: add warning upon successful md5 password auth Message-ID: References: <0731e3d8-3d13-4539-addc-a2c13a8b1b14@proxel.se> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <0731e3d8-3d13-4539-addc-a2c13a8b1b14@proxel.se> List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk On Fri, Feb 13, 2026 at 06:04:14AM +0100, Andreas Karlsson wrote: > The patch looks good and I think it would make sense to merge it in 19, why > wait for 20? But the main question I see is if this is too noisy or not. > Some applications connected to PostgreSQL quite a lot and I am sure we would > make some users unhappy so I am not fully on board with this patch. But on > the other hand we have way too many people who still use md5 and we really > should push them towards using scram. FWIW if users are really annoyed with these warnings, they can disable them by setting md5_password_warnings to off. But I think we really ought to do something like $subject before we completely remove MD5 password support. -- nathan