Re: [HACKERS] Hashing passwords (was Updated TODO list)

From: Louis Bertrand <louis@bertrandtech.on.ca>
> No, I am not suggesting PostgreSQL bundle any strong crypto: simply take
> advantage of what's available native on the host OS.
>
> BTW, the US export controls only apply to code written in the US. The
> Wassenaar Arrangement specifically excludes free/open software.

Not every OS has strong encryption built-in. And that means PgSQL would have
to maintain a crypto package for the OSes without the strong crypto. Thus
the benefits of using the OS encryption would be less significant.

Gene Sokolov.