Re: Replay attack of query cancel

Поиск
Список
Период
Сортировка
От Stephen R. van den Berg
Тема Re: Replay attack of query cancel
Дата
Msg-id 20080813101457.GF12628@cuci.nl
обсуждение исходный текст
Ответ на Re: Replay attack of query cancel  (Tom Lane <tgl@sss.pgh.pa.us>)
Список pgsql-hackers
Tom Lane wrote:
>[ thinks for a bit... ]  You could make it a change in the cancel
>protocol, which is to some extent independent of the main FE/BE
>protocol.  The problem is: how can the client know whether it's okay to
>use this new protocol for cancel?

Two options:
a. Send two cancelkeys in rapid succession at session startup, whereas  the first one is 0 or something.  The client
candetect the first  "special" cancelkey and then knows that the connection supports  cancelmethod 2.
 
b. At sessionstartup, advertise a new runtimeparameter:  cancelmethod=plainkey,hmaccoded  which the client can then
chosefrom.
 

I'd prefer b over a.
-- 
Sincerely,          Stephen R. van den Berg.

"And now for something *completely* different!"


В списке pgsql-hackers по дате отправления:

Предыдущее
От: Simon Riggs
Дата:
Сообщение: Re: SeqScan costs
Следующее
От: Gregory Stark
Дата:
Сообщение: Re: Replay attack of query cancel