Re: pg_hba.conf hostname todo

Stephen Frost <sfrost(at)snowman(dot)net> writes:
> While a wildcard does make sense (ie: www*.postgresql.org) I would
> generally expect 'commandprompt.com' to mean '*.commandprompt.com'
> implicitly.

No, that would be a really bad idea. It's not unlikely that
commandprompt.com refers to a specific host. If you implicitly allow it
to match *.commandprompt.com then there's no way to specify "connections
from just this host, not the whole domain underneath it".

I'm not sure that DNS wildcards are appropriate at all, but if they are
we should definitely require them to be written as explicit wildcards,
not have that happen silently behind the DBA's back.

regards, tom lane