Re: [HACKERS] CREATE/ALTER ROLE PASSWORD ('value' USING 'method')

On 03/07/2017 08:29 PM, Tom Lane wrote:
> Michael Paquier <michael.paquier@gmail.com> writes:
>> here is a separate thread dedicated to the following extension for
>> CREATE/ALTER ROLE: PASSWORD ('value' USING 'method').
>
> The parentheses seem weird ... do we really need those?

+1

> +        If you do not plan to use password authentication you can omit this
> +        option. The methods supported are <literal>md5</> to enforce a password
> +        to be MD5-encrypted, <literal>scram</> for a SCRAM-encrypted password
> +        and <literal>plain</> for an unencrypted password.  If the password

Can we please stop calling this encryption? What is being done is a form
of cryptographic hashing, not encryption.

Joe

--
Crunchy Data - http://crunchydata.com
PostgreSQL Support for Secure Enterprises
Consulting, Training, & Open Source Development