Tom Lane wrote:
It's also worth noting that we haven't removed the PGPASSWORD
environment variable, even though that's demonstrably insecure on some

True. But at least its use is deprecated. The reason I put in PGPASSFILE was to tempt (so far unsuccessfully) the maintainers of a certain well known application to stop using PGPASSWORD.

I'm actually inclined to vote with Stephen that this is a silly change.
I just put up the patch to show the best way of doing it if we're gonna
do it ...

OK. I'm not going to die in a ditch over it.



---------------------------(end of broadcast)---------------------------
TIP 4: Have you searched our list archives?


Reply via email to