Re: So we're in agreement....

> 
> So we're in agreement on using MD5.   Sverre, is the offer still open
> for the java MD5 you wrote?  I'll translate it to C and make sure it
> will compile/run/give-correct-results on as many platforms as possible
> including DOS/Windows, hpux, FreeBSD and IRIX.  

Yes, MD5, double-crypt with pg_shadow salt and random salt.  Sounds like
a winner all around.

And finally, we need a trigger to somehow update non-md5 strings in the
pg_shadow password field.  No one is sure how to do that yet.

--  Bruce Momjian                        |  http://www.op.net/~candle pgman@candle.pha.pa.us               |  (610)
853-3000+  If your life is a hard drive,     |  830 Blythe Avenue +  Christ can be your backup.        |  Drexel Hill,
Pennsylvania19026