Postgres Pro
Downloads
Home   >   mailing lists

Re: SCRAM with channel binding downgrade attack - Mailing list pgsql-hackers

From Peter Eisentraut
Subject Re: SCRAM with channel binding downgrade attack
Date
Msg-id 1c0084ce-7ed8-fb77-08ea-86cdc6f17288@2ndquadrant.com
Whole thread Raw
In response to Re: SCRAM with channel binding downgrade attack  (Magnus Hagander <magnus@hagander.net>)
Responses Re: SCRAM with channel binding downgrade attack
List pgsql-hackers
Tree view 
On 6/28/18 09:33, Magnus Hagander wrote:
> Should there be one or more parameters? How should they interact? At
> which level should they be controlled? Limited to SCRAM or other channel
> bindings? Are the different levels of SCRAM to be considered different
> protocols or the same protocol with a tweak? etc.

OK, I'm fine with postponing this.

But before we drop the SCRAM business completely off the open items, I
think we need to consider how TLS 1.3 affects this.

-- 
Peter Eisentraut              http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services

pgsql-hackers by date:

Previous
From: Peter Eisentraut
Date:
Subject: Re: SCRAM with channel binding downgrade attack
Next
From: Peter Eisentraut
Date:
Subject: SCRAM with channel binding downgrade attack