Re: SCRAM with channel binding downgrade attack

Поиск
Список
Период
Сортировка
От Heikki Linnakangas
Тема Re: SCRAM with channel binding downgrade attack
Дата
Msg-id D3D808E3-32BC-441C-9E0A-6DCDA508148B@iki.fi
обсуждение исходный текст
Ответ на Re: SCRAM with channel binding downgrade attack  (Robert Haas <robertmhaas@gmail.com>)
Ответы Re: SCRAM with channel binding downgrade attack  (Michael Paquier <michael@paquier.xyz>)
Список pgsql-hackers

On 25 May 2018 17:44:16 EEST, Robert Haas <robertmhaas@gmail.com> wrote:
>On Wed, May 23, 2018 at 2:46 AM, Heikki Linnakangas <hlinnaka@iki.fi>
>wrote:
>> We could provide "tls-unique" and "tls-server-end-point" in addition
>to
>> those, but I'd consider those to be developer only settings, useful
>only for
>> testing the protocol.
>
>It seems to me that this is really another sort of thing altogether.
>Whether or not you want to insist on channel binding is a completely
>separate thing from which channel binding methods you're willing to
>use.  It seems to me like the most logical thing would be to make
>these two separate connection options.

Works for me.

- Heikki


В списке pgsql-hackers по дате отправления:

Предыдущее
От: Tom Lane
Дата:
Сообщение: Re: rule-related crash in v11
Следующее
От: Robert Haas
Дата:
Сообщение: Re: [HACKERS] Transactions involving multiple postgres foreign servers