Re: Post-CVE Wishlist - Mailing list pgsql-hackers

From Peter Eisentraut
Subject Re: Post-CVE Wishlist
Date
Msg-id c05e7466-d094-2ec1-334f-5dcd024d4fc1@enterprisedb.com
Whole thread Raw
In response to Re: Post-CVE Wishlist  (Heikki Linnakangas <hlinnaka@iki.fi>)
List pgsql-hackers
On 23.11.21 23:41, Heikki Linnakangas wrote:
> On 23/11/2021 23:44, Robert Haas wrote:
>> On Tue, Nov 23, 2021 at 2:18 PM Tom Lane <tgl@sss.pgh.pa.us> wrote:
>>> Jacob Champion <pchampion@vmware.com> writes:
>>>> = Implicit TLS =
> 
> Aside from security, one small benefit of skipping the Starttls-style 
> negotiation is that you avoid one round-trip to the server.

Also, you could make use of existing TLS-aware proxy infrastructure 
without having to hack in PostgreSQL protocol support.  There is 
definitely demand for that.




pgsql-hackers by date:

Previous
From: Peter Eisentraut
Date:
Subject: Re: Mop-up from Test::More version change patch
Next
From: "kuroda.hayato@fujitsu.com"
Date:
Subject: RE: [Proposal] Add foreign-server health checks infrastructure