Protect Your PostgreSQL Passwords: How SCRAM Works & Why You Need It - Jonathan S. Katz : PGCon 2020
From https://www.pgcon.org/events/pgcon_20...
Passwords: they just seem to work. You connect to your PostgreSQL database and you are prompted for your password. You type in the correct character combination, and presto! you're in, safe and sound.
But what if I told you that all was not as it seemed. What if I told you there was a better, safer way to use passwords with PostgreSQL? What if I told you it was imperative that you upgraded, too?