Re: disable SSL compression?
От
Andres Freund
Тема
Re: disable SSL compression?
Дата
Msg-id
39713CBC-3997-480A-88D2-84A0CBF7693A@anarazel.de
Ответ на
Re: disable SSL compression? (Peter Eisentraut)
Список
Дерево обсуждения
disable SSL compression? Peter Eisentraut <peter.eisentraut@2ndquadrant.com>
Re: disable SSL compression? Claudio Freire <klaussfreire@gmail.com>
Re: disable SSL compression? Peter Eisentraut <peter.eisentraut@2ndquadrant.com>
Re: disable SSL compression? Magnus Hagander <magnus@hagander.net>
Re: disable SSL compression? Peter Eisentraut <peter.eisentraut@2ndquadrant.com>
Re: disable SSL compression? Magnus Hagander <magnus@hagander.net>
Re: disable SSL compression? Peter Eisentraut <peter.eisentraut@2ndquadrant.com>
Re: disable SSL compression? Tom Lane <tgl@sss.pgh.pa.us>
Re: disable SSL compression? Peter Eisentraut <peter.eisentraut@2ndquadrant.com>
Re: disable SSL compression? Konstantin Knizhnik <k.knizhnik@postgrespro.ru>
Re: disable SSL compression? Peter Eisentraut <peter.eisentraut@2ndquadrant.com>
Re: disable SSL compression? Andres Freund <andres@anarazel.de>
Re: disable SSL compression? Robert Haas <robertmhaas@gmail.com>
Re: disable SSL compression? Andres Freund <andres@anarazel.de>
Re: disable SSL compression? Peter Eisentraut <peter.eisentraut@2ndquadrant.com>
Re: disable SSL compression? Robert Haas <robertmhaas@gmail.com>
Re: disable SSL compression? Peter Eisentraut <peter.eisentraut@2ndquadrant.com>
Re: disable SSL compression? Tom Lane <tgl@sss.pgh.pa.us>
Re: disable SSL compression? Garick Hamlin <ghamlin@isc.upenn.edu>
Re: disable SSL compression? Andres Freund <andres@anarazel.de>
Re: disable SSL compression? Peter Eisentraut <peter.eisentraut@2ndquadrant.com>
Re: disable SSL compression? Konstantin Knizhnik <k.knizhnik@postgrespro.ru>
Re: disable SSL compression? Magnus Hagander <magnus@hagander.net>
Re: disable SSL compression? Peter Eisentraut <peter.eisentraut@2ndquadrant.com>
Re: disable SSL compression? Claudio Freire <klaussfreire@gmail.com>
Re: disable SSL compression? Craig Ringer <craig@2ndquadrant.com>
Re: disable SSL compression? Gasper Zejn <zejn@owca.info>
Re: disable SSL compression? Craig Ringer <craig@2ndquadrant.com>
On March 28, 2018 4:15:02 PM PDT, Peter Eisentraut wrote: >On 3/28/18 13:26, Konstantin Knizhnik wrote: >> If SSL compression is deprecated, should we provide own compression? >> I have implemented some prototype implementation of it (patch is >attached). >> I have added compression=on/off parameter to connection string and -Z >> option to psql and pgbench utilities. > >What I'd like to see here is extensive protocol documentation that >describes the compression method negotiation, and the interaction with >SSL, and a test suite to support that. > >Maybe start a new thread. +analysis of whether that's safe to do from a cryptographic POV. There's a reason compression has been disabled for just about all SSL/TLS libraries. Andres -- Sent from my Android device with K-9 Mail. Please excuse my brevity.
В списке pgsql-hackers по дате отправления
