Skip site navigation (1)
Skip section navigation (2)
Peripheral Links
Header And Logo
|
Site Navigation
Re: Generating unique session ids
- From: "Joshua D. Drake" <jd(at)commandprompt(dot)com>
- To: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, Tomasz Ostrowski <tometzky(at)batory(dot)org(dot)pl>, Lexington Luthor <Lexington(dot)Luthor(at)gmail(dot)com>, pgsql-general(at)postgresql(dot)org
- Subject: Re: Generating unique session ids
- Date: Thu, 27 Jul 2006 08:40:22 -0700
Alvaro Herrera wrote:
Tom Lane wrote:* Any database user is most of the time able to read function bodies, so anybody who is able co connect to your database will be able to get your 'secret_salt' and then predict session id's.Yeah, it's not clear where to hide the secret.In a memfrob'ed (or something better probably) area in a C function?
You could also do it in a untrusted plperl or plpython function.
Joshua D. Drake
--
=== The PostgreSQL Company: Command Prompt, Inc. ===
Sales/Support: +1.503.667.4564 || 24x7/Emergency: +1.800.492.2240
Providing the most comprehensive PostgreSQL solutions since 1997
http://www.commandprompt.com/
- References:
- Generating unique session ids
- From: Antimon
- Re: Generating unique session ids
- From: Tom Lane
- Re: Generating unique session ids
- From: Tomasz Ostrowski
- Re: Generating unique session ids
- From: Lexington Luthor
- Re: Generating unique session ids
- From: Tomasz Ostrowski
- Re: Generating unique session ids
- From: Tom Lane
- Re: Generating unique session ids
- From: Alvaro Herrera
- Generating unique session ids
- Prev by Date: Update entire column with new date values
- Next by Date: Re: Permissions to connect to postgres database
- Previous by thread: Re: Generating unique session ids
- Next by thread: Re: Generating unique session ids
- Indexes: