Re: [pgadmin-hackers] Client-side password encryption

2005-12-18 Thread Andreas Pflug
Dave Page wrote: -Original Message- From: [EMAIL PROTECTED] on behalf of Peter Eisentraut Sent: Sun 12/18/2005 2:25 AM To: [email protected] Subject: [pgadmin-hackers] Client-side password encryption Commands like CREATE USER foo PASSWORD 'bar' transmit the password in c

Re: [pgadmin-hackers] Client-side password encryption

2005-12-18 Thread Dave Page
-Original Message- From: [EMAIL PROTECTED] on behalf of Peter Eisentraut Sent: Sun 12/18/2005 2:25 AM To: [email protected] Subject: [pgadmin-hackers] Client-side password encryption > Commands like CREATE USER foo PASSWORD 'bar' transmit the password in > cleartext and p

[pgadmin-hackers] Client-side password encryption

2005-12-18 Thread Peter Eisentraut
Commands like CREATE USER foo PASSWORD 'bar' transmit the password in cleartext and possibly save the password in various client or server log files. I have just fixed this for psql and createuser to encrypt the password on the client side. A quick check of the pgadmin3 source code shows that