Re: remote user

johnf <jfabiani@yolo.com> writes:
> I have one remote user that wants to connect via DSL and a dynamic IP.  I do
> NOT want to open the database to all internet IP's.  Of course the fear is
> someone will attack and break the password for the remote user.  What is the
> best way I can do this?

Limit the range of IPs as much as you can, and require the connection to
use SSL, and maybe insist on a client certificate.

            regards, tom lane