Bruce Momjian <pgman@candle.pha.pa.us> writes:
> It is has the same problems as IDENT, and it doesn't add any new
> problems, and it meets people's needs, why not add it?
Because (a) it greatly increases the scope of the vulnerability,
and (b) it adds more code that will need to be rewritten to fix the
problem. I want to fix the blocking problem first, then solicit a
PAM patch that fits into the rewritten postmaster.
regards, tom lane
