Re: SCRAM with channel binding downgrade attack

From: Michael Paquier <michael(at)paquier(dot)xyz>
To: Bruce Momjian <bruce(at)momjian(dot)us>
Cc: Magnus Hagander <magnus(at)hagander(dot)net>, Heikki Linnakangas <hlinnaka(at)iki(dot)fi>, PostgreSQL-development <pgsql-hackers(at)postgresql(dot)org>, Stephen Frost <sfrost(at)snowman(dot)net>
Subject: Re: SCRAM with channel binding downgrade attack
Date: 2018-05-23 05:42:08
Message-ID: 20180523054208.GA4834@paquier.xyz
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers pgsql-www

On Tue, May 22, 2018 at 08:19:34PM -0400, Bruce Momjian wrote:
> Since tls-unique and tls-server-end-point provide the same level of
> security, I don't see any value in allowing prefer-tls-server-end-point,
> as you stated above.

Thanks. We are on the same line for this portion then.
--
Michael

In response to

Browse pgsql-hackers by date

  From Date Subject
Next Message tushar 2018-05-23 06:04:19 -D option of pg_resetwal is only works with absolute path
Previous Message Carter Thaxton 2018-05-23 05:18:32 Re: Add --include-table-data-where option to pg_dump, to export only a subset of table data

Browse pgsql-www by date

  From Date Subject
Next Message Heikki Linnakangas 2018-05-23 06:46:14 Re: SCRAM with channel binding downgrade attack
Previous Message Tom Lane 2018-05-23 03:31:08 Re: Postgres 11 release notes