It would be nice if pgx could support the SCRAM Authentication method offered by PostgreSQL
since version 10.
https://www.postgresql.org/docs/10/static/auth-methods.html#AUTH-PASSWORD
This method saves password in a more secure manner based on RFC7677, so that they are more safe
if the database gets copied from the server or found in a backup. According to https://pages.nist.gov/800-63-3/sp800-63b.html#sec5 that is recommended.
I agree it'd be good to have, but it's not something I can tackle right now.
@jackc still good that you signal agreement with the feature wish. Thanks for the reply. ;)
SCRAM-SHA-256 is now the preferred authentication method from 10+ per Authentication Methods so not having it is a huge disadvantage.
This is also something that lib/pq doesn't support and for which there are already patches for lib/pq, so maybe it wouldn't be too hard to port. See https://github.com/lib/pq/issues/817
It's been merged into lib/pq. Bump :)
Okay. Here it is: 5044e8473ad948114b6cb63f6f30f94fc7834667
Thanks!
Most helpful comment
Okay. Here it is: 5044e8473ad948114b6cb63f6f30f94fc7834667