Re: You're on SecurityFocus.com for the cleartext passwords.

"Robert B. Easter" <reaster@comptechnews.com> writes:
> Would public/private key pair authentication (like GPG) or SSL-like solutions
> work?

We already have SSL support --- that's why I wasn't especially excited
about making the password challenge itself be proof against sniffing.
Anybody who's afraid of sniffing attacks ought to be SSL-ifying his
entire database connection, not just trying to protect the password.
        regards, tom lane