On 02.03.22 21:26, Stephen Frost wrote:
Part of the point, for my part anyway, of dropping support for plaintext transmission would be to remove support for that from libpq, otherwise a compromised server could still potentially convince a client to provide a plaintext password be sent to it.
I think there should be a generalized feature for client-side selecting or filtering of authentication methods. As long as there exists more than one method, there will be tradeoffs and users might want to avoid one or the other. I don't think removing a method outright is the right solution for that.
