Could we get a `postgrestls://` or `sslmode=tls` or --tls option that instructs
psql to sends straight TLS, skipping the 000804d2162f / 000804d21630 +
N / Y / S handshake?
Rationale:
In the age of TLS, SNI, and ALPN, protocol routing and virtual hosting is
easier, more reliable, and l
In the same place that SNI is being passed to openssl during the
client-initiated TLS, could we get ALPN set to "pg" by default (and perhaps an
--alpn and/or --no-alpn) to assist in protocol routing
/ virtual hosting?
P.S. I'm willing to personally fund the development of these two features
AJ ONeal writes:
> Could we get a `postgrestls://` or `sslmode=tls` or --tls option that
> instructs psql to sends straight TLS, skipping the 000804d2162f /
> 000804d21630 + N / Y / S handshake?
You're too late:
https://git.postgresql.org/gitweb/?p=postgresql.git;a=commit;h=d39a49c1e4
On 5/11/24 11:19, AJ ONeal wrote:
Could we get a `postgrestls://` or `sslmode=tls` or --tls option that
instructs psql to sends straight TLS, skipping the 000804d2162f /
000804d21630 + N / Y / S handshake?
You should probably be following the hackers mailing list. See:
https://www.p
On 5/11/24 11:59, Joe Conway wrote:
On 5/11/24 11:19, AJ ONeal wrote:
Could we get a `postgrestls://` or `sslmode=tls` or --tls option that
instructs psql to sends straight TLS, skipping the 000804d2162f /
000804d21630 + N / Y / S handshake?
You should probably be following the hack
