Re: BUG #4340: SECURITY: Is SSL Doing Anything?

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: Magnus Hagander <magnus(at)hagander(dot)net>
Cc: Peter Eisentraut <peter_e(at)gmx(dot)net>, pgsql-bugs(at)postgresql(dot)org, Dan Kaminsky <dan(at)doxpara(dot)com>, Gregory Stark <stark(at)enterprisedb(dot)com>, Alvaro Herrera <alvherre(at)commandprompt(dot)com>, Bruce Momjian <bruce(at)momjian(dot)us>
Subject: Re: BUG #4340: SECURITY: Is SSL Doing Anything?
Date: 2008-08-20 12:35:19
Message-ID: 26930.1219235719@sss.pgh.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-bugs

Magnus Hagander <magnus(at)hagander(dot)net> writes:
> I'd set the default to "verifypeer" in 8.4 and up, but backpatch it with
> a default of "off". That way we don't break existing setups, but give
> users the ability to verify if if they want to.

This seems a bit large/invasive/new-feature-ish for a backpatch.

regards, tom lane

In response to

Responses

Browse pgsql-bugs by date

  From Date Subject
Next Message Magnus Hagander 2008-08-20 12:39:17 Re: BUG #4340: SECURITY: Is SSL Doing Anything?
Previous Message Magnus Hagander 2008-08-20 11:56:56 Re: BUG #4340: SECURITY: Is SSL Doing Anything?