On Mon, Jun 17, 2024 at 9:23 AM Jacob Champion <jacob.champ...@enterprisedb.com> wrote: > > I think the behavior with v2 and v3 errors should be the same. And I > > think an immediate failure is appropriate on any v2/v3 error during > > negotiation, assuming we don't use those errors for things like "TLS not > > supported", which would warrant a fallback. > > For GSS encryption, it was my vague understanding that older servers > respond with an error rather than the "not supported" indication. For > TLS, though, the decision in a49fbaaf (immediate failure) seemed > reasonable.
Would an open item for this be appropriate? Thanks, --Jacob