| From: | Bruce Momjian <bruce(at)momjian(dot)us> |
|---|---|
| To: | Robert Treat <xzilla(at)users(dot)sourceforge(dot)net> |
| Cc: | pgsql-hackers(at)postgresql(dot)org, "Joshua D(dot) Drake" <jd(at)commandprompt(dot)com>, mark(at)mark(dot)mielke(dot)cc, Stephen Frost <sfrost(at)snowman(dot)net>, Martijn van Oosterhout <kleptog(at)svana(dot)org>, Mark Kirkwood <markir(at)paradise(dot)net(dot)nz> |
| Subject: | Re: TODO: GNU TLS |
| Date: | 2006-12-30 04:29:11 |
| Message-ID: | 200612300429.kBU4TBO10408@momjian.us |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-hackers |
Robert Treat wrote:
> On Friday 29 December 2006 14:49, Joshua D. Drake wrote:
> > > entirely.
> > >
> > > 4) GNUTLS development seems more active? OpenSSL has been in a
> > > frozen/mature state for a while. I don't understand why OpenSSL is still
> > > labelled as 0.9.x, which might indicate alpha quality, under heavy
> > > development.
> > >
> > > I don't find the reasons too compelling - but they are points to
> > > consider.
> >
> > 5) GNUTLS does not run well under all of our supported platforms.
> >
>
> given options like --enable-dtrace and --with-libedit-preferred, I don't find
> this argument compelling...
Keep in mind it took years to get OpenSSL support up to the level we
have it now. It took SSL experts coming in and out of our development
process to get it 100% feature-complete. Doing this for another
library, I am afraid, isn't trivial, unlike the above options.
--
Bruce Momjian bruce(at)momjian(dot)us
EnterpriseDB http://www.enterprisedb.com
+ If your life is a hard drive, Christ can be your backup. +
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Andrew Dunstan | 2006-12-30 04:39:40 | Re: TODO: GNU TLS |
| Previous Message | Jim C. Nasby | 2006-12-30 04:08:04 | Re: Load distributed checkpoint |