Greetings,
* Chapman Flack (chap(at)anastigmatix(dot)net) wrote:
> If pg_hba syntax changes are being entertained, I would love to be able
> to set ssl_min_protocol_version locally in a hostssl rule.
>
> Some clients at $work are stuck with ancient SSL libraries, but I would
> much rather be able to weaken ssl_min_protocol_version just for them
> than do it globally.
This (unlike what was actually proposed) does seem like it'd be a useful
improvement. Not sure exaclty how it would work but I'm generally on
board with the idea.
Thanks,
Stephen