On 02.03.22 16:45, Jonathan S. Katz wrote:
By that argument, we should have kept "password" (plain) as an authentication method.
For comparison, the time between adding md5 and removing password was 16 years. It has been 5 years since scram was added.