Re: [PATCH v20] GSSAPI encryption support - Mailing list pgsql-hackers

From Robert Haas
Subject Re: [PATCH v20] GSSAPI encryption support
Date
Msg-id CA+TgmobdmxaOWuyA3kfbVYCtB0zKDLP7k8V0-JwWchuKUCey2Q@mail.gmail.com
Whole thread Raw
In response to Re: [PATCH v20] GSSAPI encryption support  (Stephen Frost <sfrost@snowman.net>)
Responses Re: [PATCH v20] GSSAPI encryption support
List pgsql-hackers
On Wed, Apr 10, 2019 at 9:47 PM Stephen Frost <sfrost@snowman.net> wrote:
> Right, if we changed the name of the auth method then everyone who is
> using the "gss" auth method would have to update their pg_hba.conf
> files...  That would be very ugly.  Also, it wasn't implicitly rejected,
> it was discussed up-thread (see the comments between Magnus and I,
> specifically, quoted above- "that ship sailed *years* ago") and
> explicitly rejected.

Slightly off-topic, but I am not familiar with GSSAPI and don't quite
understand what the benefits of GSSAPI encryption are as compared with
OpenSSL encryption.  I am sure there must be some; otherwise, nobody
would have bothered writing, reviewing, and committing this patch.
Can somebody enlighten me?

--
Robert Haas
EnterpriseDB: http://www.enterprisedb.com
The Enterprise PostgreSQL Company



pgsql-hackers by date:

Previous
From: Konstantin Knizhnik
Date:
Subject: Re: Zedstore - compressed in-core columnar storage
Next
From: Magnus Hagander
Date:
Subject: Re: [PATCH v20] GSSAPI encryption support