Subject: Re: Can we stop defaulting to 'ident'?
To: =?UTF-8?B?RGV2cmltIEfDvG5kw7x6?= <devrim@gunduz.org>,
 Stephen Frost <sfrost@snowman.net>
References: 
 <CAMsr+YFCuBGWh4=aM-K2LCsBEwcrqm=pphKKHEH09vHwXcspow@mail.gmail.com>
 <7761d006b5ace13a4d86ce489123e5004aaf8b6c.camel@gunduz.org>
 <20200519212710.GQ13712@tamriel.snowman.net>
 <6089d4c8e262dd6fe8a6510c283e674543a24b5c.camel@gunduz.org>
Cc: Craig Ringer <craig@2ndquadrant.com>,
 pgsql-pkg-yum <pgsql-pkg-yum@postgresql.org>
From: Peter Eisentraut <peter.eisentraut@2ndquadrant.com>
Organization: 2ndQuadrant
Message-ID: <3869d8c9-c212-8d73-52f4-13b03abe4813@2ndquadrant.com>
Date: Wed, 20 May 2020 15:09:24 +0200
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:52.0)
 Gecko/20100101 Thunderbird/52.9.1
MIME-Version: 1.0
In-Reply-To: <6089d4c8e262dd6fe8a6510c283e674543a24b5c.camel@gunduz.org>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Language: en-US
Content-Transfer-Encoding: 8bit
Precedence: bulk

On 2020-05-20 00:26, Devrim Gündüz wrote:
>> +1 to scram-sha-256 for the default for host-based/TCP connections.
>> For local, we should be using peer, just like Debian's default has
>> been for ages.
> 
> YEah, this is what I committed just now. Still, would love to hear from
> others if there are any objections.

The upstream default is still to use md5 passwords by default, and some 
deliberation has gone into that to keep it that way.  So it would make 
sense to have the RPMs also do that.  The Debian packages also still use 
md5.  Some consistency across the board would be good.  Otherwise it 
will be very confusing for users if everyone just goes into their own 
direction.

-- 
Peter Eisentraut              http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services