Re: Negotiating the SCRAM channel binding type

From: Heikki Linnakangas <hlinnaka(at)iki(dot)fi>
To: Michael Paquier <michael(at)paquier(dot)xyz>
Cc: pgsql-hackers <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: Negotiating the SCRAM channel binding type
Date: 2018-08-05 14:15:19
Message-ID: 61ae586b-7a17-26df-6ceb-c051045f8f29@iki.fi
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

On 05/08/18 17:11, I wrote:
> The only negative test there was, was to check for bogus
> scram_channel_binding option, "scram_channel_binding=not-exists". Yeah,
> it would be nice to have some, but this commit didn't really change that
> situation.

Sorry, I see now that there was indeed a test for
scram_channel_binding='', which meant "no channel binding". That was
confusing, I assumed '' was the default.

> I'm hoping that we add a libpq option to actually force channel binding
> soon. That'll make channel binding actually useful to users, but it will
> also make it easier to write tests to check that channel binding is
> actually used or not used, in the right situations.

Nevertheless, this we should do.

- Heikki

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Tom Lane 2018-08-05 16:01:04 Re: Negotiating the SCRAM channel binding type
Previous Message Heikki Linnakangas 2018-08-05 14:11:59 Re: Negotiating the SCRAM channel binding type