On 11/26/2013 12:16 PM, Robin wrote:
>
> 1. A self-signed certificate can be issued by anybody, there is no
> way of authenticating the issuer.
> 2. Distributing self-signed certificates becomes a pain - if signed
> by a CA, its easy to lodge your public key where everybody can
> find it, and knows where to look for it.
> 3. Maintenance becomes a problem
>
while that's all true for public https or whatever, none of this applies
to a point to point connection like libpq -> postmaster.
--
john r pierce 37N 122W
somewhere on the middle of the left coast