Re: Negotiating the SCRAM channel binding type - Mailing list pgsql-hackers

From Heikki Linnakangas
Subject Re: Negotiating the SCRAM channel binding type
Date
Msg-id 61ae586b-7a17-26df-6ceb-c051045f8f29@iki.fi
Whole thread Raw
In response to Re: Negotiating the SCRAM channel binding type  (Heikki Linnakangas <hlinnaka@iki.fi>)
Responses Re: Negotiating the SCRAM channel binding type
List pgsql-hackers
On 05/08/18 17:11, I wrote:
> The only negative test there was, was to check for bogus
> scram_channel_binding option, "scram_channel_binding=not-exists". Yeah,
> it would be nice to have some, but this commit didn't really change that
> situation.

Sorry, I see now that there was indeed a test for 
scram_channel_binding='', which meant "no channel binding". That was 
confusing, I assumed '' was the default.

> I'm hoping that we add a libpq option to actually force channel binding
> soon. That'll make channel binding actually useful to users, but it will
> also make it easier to write tests to check that channel binding is
> actually used or not used, in the right situations.

Nevertheless, this we should do.

- Heikki


pgsql-hackers by date:

Previous
From: Heikki Linnakangas
Date:
Subject: Re: Negotiating the SCRAM channel binding type
Next
From: Tom Lane
Date:
Subject: Re: Negotiating the SCRAM channel binding type