Re: Why don't we allow DNS names in pg_hba.conf? - Mailing list pgsql-hackers

From Tom Lane
Subject Re: Why don't we allow DNS names in pg_hba.conf?
Date
Msg-id 28377.1136145887@sss.pgh.pa.us
Whole thread Raw
In response to Re: Why don't we allow DNS names in pg_hba.conf?  ("Marc G. Fournier" <scrappy@postgresql.org>)
List pgsql-hackers
"Marc G. Fournier" <scrappy@postgresql.org> writes:
> On Sun, 1 Jan 2006, Tom Lane wrote:
>> ... I don't see a good
>> reason why we shouldn't let people use DNS names.

> Security?

Possibly, but if you're worried about that sort of attack you just don't
use DNS names in pg_hba.conf.  Certainly it'd be worth putting a warning
in the manual about the risks of referring to DNS servers that aren't
directly under your control.  But that doesn't seem like a reason not to
provide the feature for those who want it.
        regards, tom lane


pgsql-hackers by date:

Previous
From: Andreas Pflug
Date:
Subject: Re: Why don't we allow DNS names in pg_hba.conf?
Next
From: John DeSoi
Date:
Subject: Re: Why don't we allow DNS names in pg_hba.conf?