| From: | Michael Paquier <michael(at)paquier(dot)xyz> |
|---|---|
| To: | Bruce Momjian <bruce(at)momjian(dot)us> |
| Cc: | Magnus Hagander <magnus(at)hagander(dot)net>, Heikki Linnakangas <hlinnaka(at)iki(dot)fi>, PostgreSQL-development <pgsql-hackers(at)postgresql(dot)org>, Stephen Frost <sfrost(at)snowman(dot)net> |
| Subject: | Re: SCRAM with channel binding downgrade attack |
| Date: | 2018-05-23 05:42:08 |
| Message-ID: | 20180523054208.GA4834@paquier.xyz |
| Views: | Whole Thread | Raw Message | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-hackers pgsql-www |
On Tue, May 22, 2018 at 08:19:34PM -0400, Bruce Momjian wrote:
> Since tls-unique and tls-server-end-point provide the same level of
> security, I don't see any value in allowing prefer-tls-server-end-point,
> as you stated above.
Thanks. We are on the same line for this portion then.
--
Michael
| From | Date | Subject | |
|---|---|---|---|
| Next Message | tushar | 2018-05-23 06:04:19 | -D option of pg_resetwal is only works with absolute path |
| Previous Message | Carter Thaxton | 2018-05-23 05:18:32 | Re: Add --include-table-data-where option to pg_dump, to export only a subset of table data |
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Heikki Linnakangas | 2018-05-23 06:46:14 | Re: SCRAM with channel binding downgrade attack |
| Previous Message | Tom Lane | 2018-05-23 03:31:08 | Re: Postgres 11 release notes |