Skip site navigation (1) Skip section navigation (2)

Re: TODO: GNU TLS

From: Andrew Dunstan <andrew(at)dunslane(dot)net>
To: david_list(at)boreham(dot)org
Cc: Stephen Frost <sfrost(at)snowman(dot)net>, Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, Bruce Momjian <bruce(at)momjian(dot)us>, Robert Treat <xzilla(at)users(dot)sourceforge(dot)net>, pgsql-hackers(at)postgresql(dot)org, "Joshua D(dot) Drake" <jd(at)commandprompt(dot)com>, mark(at)mark(dot)mielke(dot)cc, Martijn van Oosterhout <kleptog(at)svana(dot)org>, Mark Kirkwood <markir(at)paradise(dot)net(dot)nz>
Subject: Re: TODO: GNU TLS
Date: 2007-01-02 18:44:34
Message-ID: 459AA812.3050405@dunslane.net (view raw or flat)
Thread:
Lists: pgsql-hackers
David Boreham wrote:
> Stephen Frost wrote:
>
>> * David Boreham (david_list(at)boreham(dot)org) wrote:
>>  
>>
>>> Fascinating thread for the holidays. I found it interesting that 
>>> nobody has mentioned
>>> NSS (former Netscape SSL library). It has its own bag of problems of 
>>> course, but
>>> for me is potentially more attractive than GNU TLS. e.g. it has 
>>> FIPS-140 certification
>>> and is actively under development by a software company with 
>>> significant resources.
>>> It's also very widely deployed. I'm not saying that OpenSSL is bad 
>>> (it'd probably be my
>>> first choice), just that there is another option besides GNU TLS.
>>>   
>>
>> Not sure what license that's under,
>>
> From http://www.mozilla.org/projects/security/pki/nss/:
> 'NSS is available under the Mozilla Public License, the GNU General 
> Public License, and the GNU Lesser General Public License.'
>

I suspect most postgres developers and companies would like to keep 
things as BSDish as possible. Dealing with a multitude of licenses might 
be fun for some, but many of us find it a pain in the neck.

Also, do we really want to import the NSPR into Postgres? I suspect not. 
Of course, the only thing that people are tripping over license-wise is 
libpq. But I think we would want to keep that as lean and mean as 
possible, too.

cheers

andrew


In response to

Responses

pgsql-hackers by date

Next:From: David BorehamDate: 2007-01-02 18:48:42
Subject: Re: TODO: GNU TLS
Previous:From: Greg Sabino MullaneDate: 2007-01-02 18:36:29
Subject: Re: Rare corruption of pg_class index

Privacy Policy | About PostgreSQL
Copyright © 1996-2014 The PostgreSQL Global Development Group