On Fri, Jun 12, 2026 at 3:05 AM Renaud Métrich <[email protected]> wrote: > > there is no viable workaround > — TLS-terminating proxies don't work because PostgreSQL uses an > in-protocol SSL upgrade rather than raw TLS connections.
(Haven't looked at the patch, but raw TLS connections are possible since PG17; see sslnegotiation=direct.) --Jacob
