Re: [JDBC] [HACKERS] Channel binding support for SCRAM-SHA-256

From: Peter Eisentraut <peter(dot)eisentraut(at)2ndquadrant(dot)com>
To: Michael Paquier <michael(dot)paquier(at)gmail(dot)com>, Robert Haas <robertmhaas(at)gmail(dot)com>
Cc: Álvaro Hernández Tortosa <aht(at)8kdata(dot)com>, "pgsql-hackers(at)postgresql(dot)org" <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: [JDBC] [HACKERS] Channel binding support for SCRAM-SHA-256
Date: 2017-11-28 22:42:22
Message-ID: 6de87398-a9da-aa8b-a4c2-ca06ef8d757c@2ndquadrant.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers pgsql-jdbc

On 11/28/17 17:33, Michael Paquier wrote:
> 1) Have a special value in the parameter saslchannelbinding proposed
> in patch 0001. For example by specifying "none" then no channel
> binding is used.

I was thinking if it's empty then don't use channel binding. Right now,
empty means the same thing as tls-unique. In any case, some variant of
that should be fine. I don't think we need a separate server option
that this point.

--
Peter Eisentraut http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Michael Paquier 2017-11-28 22:51:36 Re: Add PGDLLIMPORT lines to some variables
Previous Message Andres Freund 2017-11-28 22:41:50 Re: [HACKERS] Small improvement to compactify_tuples

Browse pgsql-jdbc by date

  From Date Subject
Next Message Michael Paquier 2017-11-29 02:05:01 Re: [HACKERS] Statement-level rollback
Previous Message Michael Paquier 2017-11-28 22:33:10 Re: [JDBC] [HACKERS] Channel binding support for SCRAM-SHA-256