Re: Removing SSL renegotiation (Was: Should we back-patch SSL renegotiation fixes?)

Поиск
Список
Период
Сортировка
От Magnus Hagander
Тема Re: Removing SSL renegotiation (Was: Should we back-patch SSL renegotiation fixes?)
Дата
Msg-id CABUevEyUaiyDy96T9UjxtXe3cqfqsmK24qKBC8JJiFDT8qU8Rg@mail.gmail.com
обсуждение исходный текст
Ответ на Re: Removing SSL renegotiation (Was: Should we back-patch SSL renegotiation fixes?)  (Tom Lane <tgl@sss.pgh.pa.us>)
Список pgsql-hackers
<p dir="ltr"><br /> On Jun 24, 2015 5:13 PM, "Tom Lane" <<a
href="mailto:tgl@sss.pgh.pa.us">tgl@sss.pgh.pa.us</a>>wrote:<br /> ><br /> > Andres Freund <<a
href="mailto:andres@anarazel.de">andres@anarazel.de</a>>writes:<br /> > > I, by now, have come to a different
conclusion.I think it's time to<br /> > > entirely drop the renegotiation support.<br /> ><br /> > Well,
that'sa radical proposal, but I think we should take it seriously.<br /> ><br /><p dir="ltr">Yes. <p dir="ltr">Just
onmy phone right now, but wasn't renegotiation also an attack vector in one of the recent openssl bugs? <p
dir="ltr">/Magnus<br /> 

В списке pgsql-hackers по дате отправления:

Предыдущее
От: Tom Lane
Дата:
Сообщение: Re: Should we back-patch SSL renegotiation fixes?
Следующее
От: Robert Haas
Дата:
Сообщение: Re: Multixid hindsight design