Re: You're on SecurityFocus.com for the cleartext passwords.

On Sat, 6 May 2000, Bruce Momjian wrote:

> > > Sounds like a winner.  Comments?
> > 
> > Overlycomplicated?
> > 
> > What was your objection to MD5 again?
> 
> Also, MD5 is not ideal for passwords.  Seems the standard unix-style
> password crypting is the standard, so it should be used to crypt our own
> passwords in pg_shadow.  I am sure someone would find some problem with
> us using md5 for password storage.

FreeBSD uses MD5 by default since at least ver 2.2, possibly earlier.
> We already use the unix-style password crypt to send passwords over the
> wire.  Why not use it for storage too?

Can ALL clients we support use it over the wire?  

Vince.
-- 
==========================================================================
Vince Vielhaber -- KA8CSH    email: vev@michvhf.com    http://www.pop4.net128K ISDN from $22.00/mo - 56K Dialup from
$16.00/moat Pop4 Networking       Online Campground Directory    http://www.camping-usa.com      Online Giftshop
Superstore   http://www.cloudninegifts.com
 
==========================================================================