Thread: Secure or encrypted way to connect to Postgres?

Secure or encrypted way to connect to Postgres?

From
Nigel Tamplin
Date:
Hi,

Is it possible to connect to Postgres via a secure or encrypted session
of some kind?

If so what interfaces support it, JDBC? libpq? ...

I want to access a db on a remote machine and don't want people snooping
the network traffic.

Thanks,

Nigel
email:
adt09@dial.pipex.com


Re: [INTERFACES] Secure or encrypted way to connect to Postgres?

From
Colin McCormack
Date:
I was thinking about this, and found an innovative potential solution in 
fetchmail (of all places.)

sshd will redirect connections.  fetchmail has a facility permitting it to 
connect to sshd on the remote machine, then redirect that connection to the 
POP or IMAP port on that machine.  So you have to be able to ssh in, and then 
your connection en clar only travels on the server machine.

You also get gzip compression of the stream for free (with ssh.)

I think the openSSL people have some similar kinds of facilities, called 
ssltunnel or something.

I recommend you consider this kind of approach, as it's minimally 
interventionist, uses existing code, and very strong crypto.

Colin

> Is it possible to connect to Postgres via a secure or encrypted session
> of some kind?
> 
> If so what interfaces support it, JDBC? libpq? ...
> 
> I want to access a db on a remote machine and don't want people snooping
> the network traffic.
> 
> Thanks,
> 
> Nigel
> email:
> adt09@dial.pipex.com
> 
>