Re: localhost ssl

> > Also I'm guessing you have ssl = on in postgresql.conf and server cert 
> setup.

Sorry, here's a likely explaination from postgresql.conf

ssl = on
#ssl_ca_file = '' 
 

ssl_cert_file = '/etc/ssl/certs/ssl-cert-snakeoil.pem'
#ssl_crl_file = '' 
 

ssl_key_file = '/etc/ssl/private/ssl-cert-snakeoil.key'

I have no recollection of making those choices (or what I had for 
breakfast).

> 
> If you want to enforce SSL then:
> 
> "
> hostssl
> 
>      This record matches connection attempts made using TCP/IP, but only 
> when the connection is made with SSL encryption.

Do you have any thoughts on question #2?