Re: Replay attack of query cancel

Поиск
Список
Период
Сортировка
От Kevin Grittner
Тема Re: Replay attack of query cancel
Дата
Msg-id 48A2B33C.EE98.0025.0@wicourts.gov
обсуждение исходный текст
Ответ на Re: Replay attack of query cancel  (Tom Lane <tgl@sss.pgh.pa.us>)
Список pgsql-hackers
>>> Tom Lane <tgl@sss.pgh.pa.us> wrote: 
> BTW, should we make all of this conditional on the use of an SSL
> connection?  If the original sending of the cancel key isn't secure
> against sniffing, it's hard to see what anyone is buying with all
the
> added computation.
+1
All of our important production work is done with local connections. 
If the machine has been compromised to the level that loopback traffic
is being intercepted, these protections won't help.
-Kevin


В списке pgsql-hackers по дате отправления:

Предыдущее
От: Bruce Momjian
Дата:
Сообщение: Re: Uncopied parameters on CREATE TABLE LIKE
Следующее
От: Bruce Momjian
Дата:
Сообщение: Re: Transaction-controlled robustness for replication