I'm currently installing Thingworx server on linux.
While installing the database i notices the following:
6. Configure pgAdmin:
$ sudo pgadmin4
◦ In pgAdmin, click on file->Open postgresql.conf
◦ Open /etc/postgresql/x.x/main/postgresql.conf
◦ Put a check next to listen addresses and port. The default settings of localhost and 5432 are usually sufficient.
◦ Save and close.
◦ Click on file->Open pg_hba.conf
◦ Open /etc/postgresql/x.x/main/pg_hba.conf
◦ Double-click on the database ‘all’ line with address 127.0.0.1/32
◦ Set Method to md5
◦ Click OK
◦ Save and exit
◦ Close pgAdmin
(Sorry i'm unable to quote!!)
I'm not happy that MD5 is used for Hashing. MD5 is not a really secure algoritm anymore and i would like to use Sha-2 (what is current default) if possible! Is this possible? if Not Why...
More info on MD5:
https://security.stackexchange.com/questions/19906/is-md5-considered-insecure https://www.freecodecamp.org/news/md5-vs-sha-1-vs-sha-2-which-is-the-most-secure-encryption-hash-and-how-to-check-them/
https://infosecscout.com/why-md5-is-not-safe/
