Re: SSL (patch 6)
От | Bruce Momjian |
---|---|
Тема | Re: SSL (patch 6) |
Дата | |
Msg-id | 200206140431.g5E4VPK22473@candle.pha.pa.us обсуждение исходный текст |
Ответ на | SSL (patch 6) (Bear Giles <bgiles@coyotesong.com>) |
Список | pgsql-patches |
Patch applied. Thanks. --------------------------------------------------------------------------- Bear Giles wrote: > SSL support for ephemeral DH keys. > > As the comment headers in be-secure.c discusses, EPH preserves > confidentiality even if the static private key (which is usually > kept unencrypted) is compromised. > > Because of the value of this, common default values are hard-coded > to protect the confidentiality of the data even if an attacker > successfully deletes or modifies the external file. > > Bear Content-Description: /tmp/patch6 [ Attachment, skipping... ] > > ---------------------------(end of broadcast)--------------------------- > TIP 5: Have you checked our extensive FAQ? > > http://www.postgresql.org/users-lounge/docs/faq.html -- Bruce Momjian | http://candle.pha.pa.us pgman@candle.pha.pa.us | (610) 853-3000 + If your life is a hard drive, | 830 Blythe Avenue + Christ can be your backup. | Drexel Hill, Pennsylvania 19026
В списке pgsql-patches по дате отправления: