SCRAM authentication in PostgreSQL 10

PostgreSQL's current authentication mechanisms are old and weak by today's standards. MD5, which is used for password-based authentication currently, is generally considered not secure anymore.

PostgreSQL version 10 adds support for a new authentication method called SCRAM. SCRAM addresses the weaknesses of MD5, making password-based authentication secure again.

In this presentation, I will explain how SCRAM works, the benefits it has over current authentication mechanisms, and explore some future enhancements that it will enable.

PostgreSQL's current authentication mechanisms are old and weak by today's standards. MD5, which is used for password-based authentication currently, is generally considered not secure anymore.

PostgreSQL version 10 adds support for a new authentication method called SCRAM. SCRAM addresses the weaknesses of MD5, making password-based authentication secure again.

In this presentation, I will explain how SCRAM works, the benefits it has over current authentication mechanisms, and explore some future enhancements that it will enable.