Re: [DOCS] Documentation for CREATE USER

2014-10-14 Thread Phil Olson
*forgot to reply-all I appreciate the feedback. I do understand in the scheme of things, this is very low priority so I'll entrust the final say with you guys and refrain from following up beyond this email. > I'm not sure whether a doc is needed It should avoid threads such as the one I first e

Re: [DOCS] Documentation for CREATE USER

2014-10-14 Thread Josh Kupershmidt
On Thu, Oct 9, 2014 at 5:29 PM, Phil Olson wrote: > In short, I think it should be made clear that an encrypted user password > for all intents and purposes, is simply obfuscated. Well, I do agree that "encrypted" is a misleading word to use in this context, since "hashed" is the technically corr

Re: [DOCS] Documentation for CREATE USER

2014-10-09 Thread Ian Barwick
On 14/10/10 6:29, Phil Olson wrote: > [2] > http://www.postgresql.org/docs/8.0/static/sql-createuser.html Just a quick note - the above link is to documentation for a PostgreSQL version which is no longer supported. If you replace the version number in the URL with "current", you'll be guaranteed

[DOCS] Documentation for CREATE USER

2014-10-09 Thread Phil Olson
In short, I think it should be made clear that an encrypted user password for all intents and purposes, is simply obfuscated. Encrypted implies secure, and after looking into why md5 is the only option (see [1] link below), I fee