Re: [PATCH v18] GSSAPI encryption support - Mailing list pgsql-hackers

From Stephen Frost
Subject Re: [PATCH v18] GSSAPI encryption support
Date
Msg-id 20180806143633.GJ27724@tamriel.snowman.net
Whole thread Raw
In response to Re: [PATCH v18] GSSAPI encryption support  (Heikki Linnakangas <hlinnaka@iki.fi>)
Responses Re: [PATCH v18] GSSAPI encryption support
Re: [PATCH v18] GSSAPI encryption support
List pgsql-hackers
Heikki,

* Heikki Linnakangas (hlinnaka@iki.fi) wrote:
> Sorry if this sounds facetious, but:
>
> What is the point of this patch? What's the advantage of GSSAPI encryption
> over SSL? I was hoping to find the answer by reading the documentation
> changes, but all I can see is "how" to set it up, and nothing about "why".

If you've already got an existing Kerberos environment, then it's a lot
nicer to leverage that rather than having to also implement a full PKI
to support and use SSL-based encryption.

There's also something to be said for having alternatives to OpenSSL.

Thanks!

Stephen

Attachment

pgsql-hackers by date:

Previous
From: Stephen Frost
Date:
Subject: Re: Allow COPY's 'text' format to output a header
Next
From: Charles Cui
Date:
Subject: Re: [GSoC]The project summary