Re: SCRAM with channel binding downgrade attack

Поиск
Список
Период
Сортировка
От Magnus Hagander
Тема Re: SCRAM with channel binding downgrade attack
Дата
Msg-id CABUevExMo5jNw1Jvw+t2dbMYg+dBY_=5o0m=OrmpT=MOhfyn7g@mail.gmail.com
обсуждение исходный текст
Ответ на Re: SCRAM with channel binding downgrade attack  (Peter Eisentraut <peter.eisentraut@2ndquadrant.com>)
Ответы Re: SCRAM with channel binding downgrade attack  (Peter Eisentraut <peter.eisentraut@2ndquadrant.com>)
Список pgsql-hackers
Дерево обсуждения


On Wed, Jun 27, 2018 at 6:55 PM, Peter Eisentraut <peter.eisentraut@2ndquadrant.com> wrote:
On 6/14/18 13:43, Magnus Hagander wrote:
> I still think that the fact that we are still discussing what is
> basically the *basic concepts* of how this would be set up after we have
> released beta1 is a clear sign that this should not go into 11.

Other than some naming and handling of some nonsensical combinations,
what is unclear?


Should there be one or more parameters? How should they interact? At which level should they be controlled? Limited to SCRAM or other channel bindings? Are the different levels of SCRAM to be considered different protocols or the same protocol with a tweak? etc.


--

В списке pgsql-hackers по дате отправления:

Предыдущее
От: Masahiko Sawada
Дата:
Сообщение: Re: Changing the autovacuum launcher scheduling; oldest table first algorithm
Следующее
От: Magnus Hagander
Дата:
Сообщение: Re: SCRAM with channel binding downgrade attack