Make encryption of stored passwords the default, as discussed months ago.

diff --git a/doc/src/sgml/runtime.sgml b/doc/src/sgml/runtime.sgml
index 78d6dec0aaea943145a6a15ba1017e989ab4e62b..5f5b816967c415dc62783852fc35f748a07f4f9e 100644 (file)
--- a/doc/src/sgml/runtime.sgml
+++ b/doc/src/sgml/runtime.sgml
@@ -1,5 +1,5 @@
 
 
 
@@ -1518,8 +1518,7 @@ dynamic_library_path = '/usr/local/lib/postgresql:/home/my_project/lib:$libdir'
         When a password is specified in CREATE USER or
         ALTER USER without writing either ENCRYPTED or
         UNENCRYPTED, this flag determines whether the password is to be
-        encrypted. The default is off (do not encrypt the password), but
-        this choice may change in a future release.
+        encrypted. The default is on (encrypt the password).
        
       
      

diff --git a/src/backend/utils/misc/postgresql.conf.sample b/src/backend/utils/misc/postgresql.conf.sample
index d18403913ef4a0b210d7ee56b37627d92123eae0..c2a3c1e707754d037c793983bce57a04bb8b0bfb 100644 (file)
--- a/src/backend/utils/misc/postgresql.conf.sample
+++ b/src/backend/utils/misc/postgresql.conf.sample
@@ -199,6 +199,6 @@
 #default_transaction_isolation = 'read committed'
 #max_expr_depth = 10000        # min 10
 #max_files_per_process = 1000  # min 25
-#password_encryption = false
+#password_encryption = true
 #sql_inheritance = true
 #transform_null_equals = false