Re: JDBC compression over SSL
| От | Craig Ringer |
|---|---|
| Тема | Re: JDBC compression over SSL |
| Дата | |
| Msg-id | CAMsr+YFh1J72bckTZe0te+eJCJ=JnW-g-q_KQhFg_thVdxKxDw@mail.gmail.com обсуждение исходный текст |
| Ответ на | Re: JDBC compression over SSL (Tom Lane <tgl@sss.pgh.pa.us>) |
| Список | pgsql-jdbc |
On 5 January 2015 at 23:36, Tom Lane <tgl@sss.pgh.pa.us> wrote:
Craig Ringer <craig@2ndquadrant.com> writes:
> Yep... and I'm not sure it's actually doing SSL compression, rather than
> compression of the stream *inside* the SSL socket.
Worth noting here is that many/most people have abandoned use of SSL
compression because it is now known to render the stream more
decryptable. I do not know whether that objection also applies to
doing separate compression "inside the socket" as you put it.
Whether or not it does, if it's not actual SSL compression it won't interoperate with PostgreSQL - as you know, PostgreSQL doesn't support data stream compression on the socket.
Some people are trying to use SSL compression as a workaround for this. I think the real answer is probably to just add PostgreSQL protocol-level support for compression, rather than trying to (ab)use SSL for it.
--
Craig Ringer http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Training & Services
Craig Ringer http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Training & Services
В списке pgsql-jdbc по дате отправления: