Re: [HACKERS] Postgres: pg_hba.conf, md5, pg_shadow, encrypted passwords
- To: Tom Lane <tgl@xxxxxxxxxxxxx>, "Jim C. Nasby" <decibel@xxxxxxxxxxx>, pgsql-hackers@xxxxxxxxxxxxxx, bugtraq@xxxxxxxxxxxxxxxxx
- Subject: Re: [HACKERS] Postgres: pg_hba.conf, md5, pg_shadow, encrypted passwords
- From: Stephen Frost <sfrost@xxxxxxxxxxx>
- Date: Thu, 21 Apr 2005 20:05:29 -0400
- In-reply-to: <20050421222716.GA2730@xxxxxxxx>
- List-help: <mailto:bugtraq-help@securityfocus.com>
- List-id: <bugtraq.list-id.securityfocus.com>
- List-post: <mailto:bugtraq@securityfocus.com>
- List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
- List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
- Mail-followup-to: Tom Lane <tgl@xxxxxxxxxxxxx>, "Jim C. Nasby" <decibel@xxxxxxxxxxx>, pgsql-hackers@xxxxxxxxxxxxxx, bugtraq@xxxxxxxxxxxxxxxxx
- Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
- References: <20050420165055.GQ29028@xxxxxxxxxxxxxx> <4659.1114030998@xxxxxxxxxxxxx> <20050420212323.GT58835@xxxxxxxxxxx> <6070.1114034598@xxxxxxxxxxxxx> <20050421022701.GU29028@xxxxxxxxxxxxxx> <20050421222716.GA2730@xxxxxxxx>
- User-agent: Mutt/1.5.6+20040907i
* Bruno Wolff III (bruno@xxxxxxxx) wrote:
> On Wed, Apr 20, 2005 at 22:27:01 -0400,
> Stephen Frost <sfrost@xxxxxxxxxxx> wrote:
> > SHA2 would also be nice.
>
> I think the new hash functions are called SHA256 and SHA512.
> For Postgres' purposes the recent weaknesses found in SHA1 and MD5
> aren't a big deal.
Well, alright, SHA256 and SHA512. It would be nice to have Postgres
support them.
Stephen
Attachment:
signature.asc
Description: Digital signature
- References:
- Postgres: pg_hba.conf, md5, pg_shadow, encrypted passwords
- Re: [HACKERS] Postgres: pg_hba.conf, md5, pg_shadow, encrypted passwords
- Re: [HACKERS] Postgres: pg_hba.conf, md5, pg_shadow, encrypted passwords
- Re: [HACKERS] Postgres: pg_hba.conf, md5, pg_shadow, encrypted passwords
- Re: [HACKERS] Postgres: pg_hba.conf, md5, pg_shadow, encrypted passwords
- Re: [HACKERS] Postgres: pg_hba.conf, md5, pg_shadow, encrypted passwords