Re:Mailr: an open-source webmail client with Gmail-like conv...
by Arnt on Tuesday April 08, 2014 @07:45AM
(#7552755)
I wrote that sentence.
Trust is not a good idea, in my opinion. But I know that some people disagree with me, and I have better things to do than discuss the issue with them.
MD5 is fine, I think. If you allow randoms from the entire internet to connect, allowing MD5 won't hurt you much more. If you restrict connections to e.g. your own IP addresses using a packet filter or firewall, MD5 definitely will not hurt you.
What irks me is the FAQ entry claiming "If you have trouble with user authentication, edit the pg_hba.conf to allow trust or md5"... I - don't think that this is a good idea?