Re: Recent vendor SSL renegotiation patches break PostgreSQL

Поиск
Список
Период
Сортировка
От Tom Lane
Тема Re: Recent vendor SSL renegotiation patches break PostgreSQL
Дата
Msg-id 11293.1265213369@sss.pgh.pa.us
обсуждение исходный текст
Ответ на Re: Recent vendor SSL renegotiation patches break PostgreSQL  (Michael Ledford <mledford@gmail.com>)
Ответы Re: Recent vendor SSL renegotiation patches break PostgreSQL  (Michael Ledford <mledford@gmail.com>)
Re: Recent vendor SSL renegotiation patches break PostgreSQL  (Alvaro Herrera <alvherre@commandprompt.com>)
Список pgsql-hackers
Michael Ledford <mledford@gmail.com> writes:
> One might argue that the current method is already weakened as it is
> measured by the amount of data sent instead of of a length of time. A
> session could live a long time under the 512MB threshold depending on
> the queries that are being performed.

Renegotiation after X amount of data is the recommended method AFAIK,
because it limits the volume of data available to cryptanalysis.
What makes you think that elapsed time is relevant at all?
        regards, tom lane


В списке pgsql-hackers по дате отправления:

Предыдущее
От: Robert Haas
Дата:
Сообщение: Re: Review of Writeable CTE Patch
Следующее
От: Robert Haas
Дата:
Сообщение: Re: [CFReview] Red-Black Tree