On Tue, Feb 14, 2023 at 06:16:18PM -0500, Jonathan S. Katz wrote: > I opted for the approach in [2]. v5 contains the branching logic for the > UTF8 only tests, and the corresponding output files. I tested locally on > macOS against both UTF8 + C locales.
I was reading this thread again, and pondered on this particular point: https://www.postgresql.org/message-id/caawbhmhjcfc4oaga_7yluhtj6j+rxey+bodrygzndaflgfz...@mail.gmail.com We've had our share of complains over the years that Postgres logs password data in the logs with various DDLs, so I'd tend to agree that this is not a practice we should try to encourage more. The parameterization of the SCRAM verifiers through GUCs (like Daniel's https://commitfest.postgresql.org/42/4201/ for the iteration number) is more promising because it is possible to not have to send the password over the wire with once we let libpq take care of the computation, and the server would not know about that. -- Michael
signature.asc
Description: PGP signature
