Re: can we mark upper/lower/textlike functions leakproof?
| От | Joe Conway |
|---|---|
| Тема | Re: can we mark upper/lower/textlike functions leakproof? |
| Дата | |
| Msg-id | e42ce45b-e9c3-4680-bbc4-b59c32cfc7d0@joeconway.com обсуждение |
| Ответ на | Re: can we mark upper/lower/textlike functions leakproof? (Laurenz Albe <laurenz.albe@cybertec.at>) |
| Ответы |
Re: can we mark upper/lower/textlike functions leakproof?
|
| Список | pgsql-hackers |
On 8/1/24 07:17, Laurenz Albe wrote: > On Wed, 2024-07-31 at 14:43 -0400, Joe Conway wrote: >> I still maintain that there is a whole host of users that would accept >> the risk of side channel attacks via existence of an error or not, if >> they could only be sure nothing sensitive leaks directly into the logs >> or to the clients. We should give them that choice. > > I think that you are right. thanks > But what do you tell the users who would not accept that risk? Document that the option should not be used if that is the case ¯\_(ツ)_/¯ -- Joe Conway PostgreSQL Contributors Team RDS Open Source Databases Amazon Web Services: https://aws.amazon.com
В списке pgsql-hackers по дате отправления: