Re: SCRAM with channel binding downgrade attack

From: Michael Paquier <michael(at)paquier(dot)xyz>
To: Bruce Momjian <bruce(at)momjian(dot)us>
Cc: Magnus Hagander <magnus(at)hagander(dot)net>, Heikki Linnakangas <hlinnaka(at)iki(dot)fi>, PostgreSQL-development <pgsql-hackers(at)postgresql(dot)org>, Stephen Frost <sfrost(at)snowman(dot)net>
Subject: Re: SCRAM with channel binding downgrade attack
Date: 2018-05-23 23:46:27
Message-ID: 20180523234627.GC15445@paquier.xyz
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers pgsql-www

On Wed, May 23, 2018 at 06:41:16PM -0400, Bruce Momjian wrote:
> I can imagine someone wanting both checks so merging them into a single
> options seems unwise, as Magnus mentioned.

FWIW, definitely agreed.
--
Michael

In response to

Browse pgsql-hackers by date

  From Date Subject
Next Message Ideriha, Takeshi 2018-05-24 00:19:32 RE: Update backend/lib/README
Previous Message Michael Paquier 2018-05-23 23:45:03 Re: -D option of pg_resetwal is only works with absolute path

Browse pgsql-www by date

  From Date Subject
Next Message Bruce Momjian 2018-05-24 02:06:52 Re: Postgres 11 release notes
Previous Message Bruce Momjian 2018-05-23 22:41:16 Re: SCRAM with channel binding downgrade attack