Re: SCRAM with channel binding downgrade attack

From: Peter Eisentraut <peter(dot)eisentraut(at)2ndquadrant(dot)com>
To: Magnus Hagander <magnus(at)hagander(dot)net>, Michael Paquier <michael(at)paquier(dot)xyz>
Cc: Heikki Linnakangas <hlinnaka(at)iki(dot)fi>, Postgres hackers <pgsql-hackers(at)postgresql(dot)org>, Robert Haas <robertmhaas(at)gmail(dot)com>, Stephen Frost <sfrost(at)snowman(dot)net>, Bruce Momjian <bruce(at)momjian(dot)us>
Subject: Re: SCRAM with channel binding downgrade attack
Date: 2018-06-27 16:55:28
Message-ID: 14d4f3bd-616b-c9f7-42bd-fa9aace14c4e@2ndquadrant.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers pgsql-www

On 6/14/18 13:43, Magnus Hagander wrote:
> I still think that the fact that we are still discussing what is
> basically the *basic concepts* of how this would be set up after we have
> released beta1 is a clear sign that this should not go into 11.

Other than some naming and handling of some nonsensical combinations,
what is unclear?

--
Peter Eisentraut http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Peter Eisentraut 2018-06-27 16:58:19 Re: Jsonb transform for pl/python
Previous Message Peter Eisentraut 2018-06-27 16:51:02 Re: assert in nested SQL procedure call in current HEAD

Browse pgsql-www by date

  From Date Subject
Next Message Alvaro Herrera 2018-06-27 17:24:15 Re: SCRAM with channel binding downgrade attack
Previous Message Magnus Hagander 2018-06-27 14:13:28 Re: malware on postgresql-archive.org/ ??- background windows and pages closing on 'back one page'