On Wed, Sep 16, 2026 at 7:21 AM Tom Lane <tgl@sss.pgh.pa.us> wrote:
> Daniel Gustafsson <daniel@yesql.se> writes:
> > To be honest, I am absolutely terrified by any feature which does any level of
> > work based on user input before authentication or authorization.
>
> Yeah. TBH, I can't see this ever getting committed.
I agree.
Greg, I think any design that mixes HTTP and the Postgres protocol on
the wire is probably doomed, because then we all get to be forever
vigilant against cross-protocol attacks. I have many, many, more
issues with the design as presented, but IMNSHO the core feature is a
nonstarter, so it doesn't make much sense to get into those details.
It seems to me that there's nothing wrong with running a separate
service that provides that information, which can then be tailored to
whatever security requirements (or not) are required.
--Jacob
