Received: from malur.postgresql.org ([217.196.149.56])
	by arkaria.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256)
	(Exim 4.89)
	(envelope-from <pgsql-pkg-yum-owner+archive@lists.postgresql.org>)
	id 1iiK0D-0004C6-BW
	for pgsql-pkg-yum@arkaria.postgresql.org; Fri, 20 Dec 2019 15:15:41 +0000
Received: from localhost ([127.0.0.1] helo=malur.postgresql.org)
	by malur.postgresql.org with esmtp (Exim 4.89)
	(envelope-from <pgsql-pkg-yum-owner+archive@lists.postgresql.org>)
	id 1iiK0C-0004wM-2P
	for pgsql-pkg-yum@arkaria.postgresql.org; Fri, 20 Dec 2019 15:15:40 +0000
Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29])
	by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256)
	(Exim 4.89)
	(envelope-from <cb@df7cb.de>)
	id 1iiK0B-0004wF-RK
	for pgsql-pkg-yum@lists.postgresql.org; Fri, 20 Dec 2019 15:15:39 +0000
Received: from feynman.df7cb.de ([195.49.152.168])
	by magus.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256)
	(Exim 4.92)
	(envelope-from <cb@df7cb.de>)
	id 1iiK09-0001Tt-FB
	for pgsql-pkg-yum@postgresql.org; Fri, 20 Dec 2019 15:15:39 +0000
Received: from msg.df7cb.de (unknown
 [IPv6:2003:5b:203b:100:7627:eaff:fe52:8e03])
	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
	 key-exchange ECDHE (P-256) server-signature RSA-PSS (4096 bits)
 server-digest SHA256)
	(Client did not present a certificate)
	by feynman.df7cb.de (Postfix) with ESMTPSA id 47fXPM4glsz3Dyq;
	Fri, 20 Dec 2019 16:15:35 +0100 (CET)
Date: Fri, 20 Dec 2019 16:15:35 +0100
From: Christoph Berg <myon@debian.org>
To: Stephen Frost <sfrost@snowman.net>
Cc: Devrim =?iso-8859-1?B?R/xuZPx6?= <devrim@gunduz.org>,
	Craig Ringer <craig@2ndquadrant.com>,
	pgsql-pkg-yum <pgsql-pkg-yum@postgresql.org>
Subject: Re: Can we stop defaulting to 'ident'?
Message-ID: <20191220151535.GE9564@msg.df7cb.de>
Mail-Followup-To: Christoph Berg <myon@debian.org>,
	Stephen Frost <sfrost@snowman.net>,
	Devrim =?iso-8859-1?B?R/xuZPx6?= <devrim@gunduz.org>,
	Craig Ringer <craig@2ndquadrant.com>,
	pgsql-pkg-yum <pgsql-pkg-yum@postgresql.org>
References: 
 <CAMsr+YFCuBGWh4=aM-K2LCsBEwcrqm=pphKKHEH09vHwXcspow@mail.gmail.com>
 <77df509da61adaebca6c5f0451f1c1616f1faa45.camel@gunduz.org>
 <20191220103240.GB9564@msg.df7cb.de>
 <20191220150644.GO3195@tamriel.snowman.net>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20191220150644.GO3195@tamriel.snowman.net>
User-Agent: Mutt/1.12.2 (2019-09-21)
List-Id: <pgsql-pkg-yum.lists.postgresql.org>
List-Help: <https://lists.postgresql.org/manage/>
List-Subscribe: <https://lists.postgresql.org/manage/>
List-Post: <mailto:pgsql-pkg-yum@lists.postgresql.org>
List-Owner: <mailto:pgsql-pkg-yum-owner@lists.postgresql.org>
List-Archive: <https://www.postgresql.org/list/pgsql-pkg-yum>
Precedence: bulk

Re: Stephen Frost 2019-12-20 <20191220150644.GO3195@tamriel.snowman.net>
> SCRAM is *definitely* better and I strongly support us moving to it,
> provided it doesn't break anything existing (which it generally
> shouldn't...  but maybe there's some weird edge cases, or possibly older
> clients, but still, at some point, we need to move this default to be
> SCRAM).

TBH I haven't really read the manual section about md5-scram
compatibility yet, but from memory, there's a lot of footnotes that
need to be taken into account before the switch can be flipped, if
upgrades from old servers are to be supported. The process sounds
scary and painful.

Christoph