Magnus Hagander <magnus(at)hagander(dot)net> writes:
> Tom Lane wrote:
>> It is not apparent why the client should be stricter than
>> that, and definitely not apparent why such strictness should be the
>> default behavior.
> It's "secure by default".
In my experience ssh itself isn't this strict. Why should libpq be?
I think most users will see this as a bug, not as being secure.
regards, tom lane