Re: what can go in root.crt ? - Mailing list pgsql-hackers

From Laurenz Albe
Subject Re: what can go in root.crt ?
Date
Msg-id 00d02578e39a6cc268e171efa5dd5da99c3e345e.camel@cybertec.at
Whole thread Raw
In response to Re: what can go in root.crt ?  (Chapman Flack <chap@anastigmatix.net>)
Responses Re: what can go in root.crt ?
List pgsql-hackers
On Thu, 2020-06-04 at 08:25 -0400, Chapman Flack wrote:
> > I feel bad about bending the basic idea of certificates and trust to suit
> > some misbegotten bureaucratic constraints on good security.
> 
> Can you elaborate on what, in the email message you replied to here,
> represented a bending of the basic idea of certificates and trust?
> 
> I didn't notice any.

I was referring to the wish to *not* use a self-signed CA certificate,
but an intermediate certificate as the ultimate authority, based on
a distrust of the certification authority that your organization says
you should trust.

Yours,
Laurenz Albe




pgsql-hackers by date:

Previous
From: Kenichiro Tanaka
Date:
Subject: Re: Wrong width of UNION statement
Next
From: Juan Fuentes
Date:
Subject: Re: Possible bug on Postgres 12 (CASE THEN evaluated prematurely) -Change of behaviour compared to 11, 10, 9