3 ms·
With pgcrypto? https://x-team.com/blog/storing-secure-passwords-with-postgresql/ https://x-team.com/blog/storing-secure-passwords-with-postgr...
by nix23 6y ago
With pgcrypto?
https://x-team.com/blog/storing-secure-passwords-with-postgresql/ https://x-team.com/blog/storing-secure-passwords-with-postgr...
- sk5t 6y agoWon't the advice in that cursory blog post expose the plaintext to query logs? IMHO doing the hashing and password comparison in application code has benefits in both shifting the compute workload to horizontally scalable non-db workers and keeping the plaintext off the wire/queries.