Re: [HACKERS] SCRAM authentication, take three

Поиск
Список
Период
Сортировка
От Michael Paquier
Тема Re: [HACKERS] SCRAM authentication, take three
Дата
Msg-id CAB7nPqQ1eZ4Acryz_kDVLT8AnpQ+vyhV_AJzz4Q818SVsVS=2g@mail.gmail.com
обсуждение исходный текст
Ответ на Re: [HACKERS] SCRAM authentication, take three  (Robert Haas <robertmhaas@gmail.com>)
Список pgsql-hackers
On Sun, Feb 19, 2017 at 6:55 PM, Robert Haas <robertmhaas@gmail.com> wrote:
> Gosh, this SCRAM stuff seems to be taking us pretty deeply into
> dealing with encoding details which apparently we haven't formerly
> needed to worry about.  That is a little surprising and maybe
> something we should try to avoid?

The RFC of SCRAM, RFC5802 is clear on the matter
(https://tools.ietf.org/html/rfc5802), SASLprep needs NFKC (RFC4013
here, the worst in the set https://tools.ietf.org/html/rfc4013) if we
want our implementation to be compatible with any other Postgres
driver that implement things at protocol level without libpq. I think
that JDBC is one of those things. So I am afraid we cannot avoid it if
we want SCRAM.
-- 
Michael



В списке pgsql-hackers по дате отправления:

Предыдущее
От: Robert Haas
Дата:
Сообщение: Re: [HACKERS] Index corruption with CREATE INDEX CONCURRENTLY
Следующее
От: Petr Jelinek
Дата:
Сообщение: Re: [HACKERS] Provide list of subscriptions and publications inpsql's completion