Re: sunsetting md5 password support

Big +1 to the idea, but it's not going to be pretty; there is a lot of
baked-in MD5 stuff around.



>  2.  In v19, allow upgrading with MD5 passwords and allow authenticating
>      with them, but disallow creating new ones (i.e., restrict/remove
>      password_encryption and don't allow setting pre-hashed MD5 passwords).
>

Certainly not remove it, that would break lots of things. Perhaps one
release with a strong warning when md5 is used, that cannot be disabled,
then disallow new ones?


>  3.  In v20, allow upgrading with MD5 passwords, but disallow using them
> for authentication.


Again, maybe a release that complains real loudly but still allows it?


>  4.  In v21, disallow upgrading with MD5 passwords.


You mean having pg_upgrade refuse to go on? Or maybe have it empty the
passwords out?

Cheers,
Greg