Re: PostgreSQL db password policy
David Fetter <david@fetter.org>
From: David Fetter <david@fetter.org>
To: sudesh mohane <smohane@gmail.com>
Cc: pgsql-bugs@lists.postgresql.org
Date: 2018-12-04T19:32:18Z
Lists: pgsql-bugs
On Tue, Dec 04, 2018 at 05:15:25PM +0530, sudesh mohane wrote: > > Hello Team, > > > > We are using PostgreSQL db for one of our projects. By default DB > > accepts any password. However client need password policy. > > > > We want to implement password policy (e.g. password expiry, password > > length etc) in PostgreSQL. Unless your client has regulatory requirements for password expiration, you should discourage them in the strongest possible terms from implementing one. https://www.microsoft.com/en-us/research/wp-content/uploads/2016/02/SoLongAndNoThanks.pdf Best, David. -- David Fetter <david(at)fetter(dot)org> http://fetter.org/ Phone: +1 415 235 3778 Remember to vote! Consider donating to Postgres: http://www.postgresql.org/about/donate