Re: [HACKERS] PostgreSQL - Weak DH group - Mailing list pgsql-hackers

From Tom Lane
Subject Re: [HACKERS] PostgreSQL - Weak DH group
Date
Msg-id 10598.1499970625@sss.pgh.pa.us
Whole thread Raw
In response to Re: [HACKERS] PostgreSQL - Weak DH group  (Heikki Linnakangas <hlinnaka@iki.fi>)
Responses Re: [HACKERS] PostgreSQL - Weak DH group
List pgsql-hackers
Heikki Linnakangas <hlinnaka@iki.fi> writes:
> I don't think this can be backpatched. It changes the default DH 
> parameters from 1024 bits to 2048 bits. That's a good thing for 
> security, but older clients might not support it, and would refuse to 
> connect or would fall back to something less secure.

Do we have any hard information about which versions of which clients
might not support that?  (In particular I'm wondering if any still exist
in the wild.)
        regards, tom lane



pgsql-hackers by date:

Previous
From: Tom Lane
Date:
Subject: [HACKERS] CAST vs ::
Next
From: Robert Haas
Date:
Subject: Re: [HACKERS] PostgreSQL - Weak DH group