Greetings,
* Peter Eisentraut (peter.eisentr...@2ndquadrant.com) wrote:
> On 2019-09-17 22:22, Tom Lane wrote:
> > Peter Eisentraut writes:
> >> * Add GSSAPI encryption support (Robbie Harwood, Stephen Frost)
> >> This allows TCP/IP connections to be encrypted when using GSSAPI
> >> authentic
I've pushed some release note adjustments responding to your points
about the GSSAPI and name-collation entries. I see the LDAP text
is fixed already.
regards, tom lane
On Tue, Sep 17, 2019 at 7:09 PM Peter Eisentraut <
peter.eisentr...@2ndquadrant.com> wrote:
>
> > * Discovery of LDAP servers if PostgreSQL is built with OpenLDAP
>
> I would remove the "if" part from the major features list, since it's a
> qualification of minor importance. Instead I'd write som
On 2019-09-17 22:22, Tom Lane wrote:
> Peter Eisentraut writes:
>> * Add GSSAPI encryption support (Robbie Harwood, Stephen Frost)
>> This allows TCP/IP connections to be encrypted when using GSSAPI
>> authentication without having to set up a separate encryption facility
>> like SSL.
> Hmm,
On 9/17/19 4:10 PM, Peter Eisentraut wrote:
> On 2019-09-17 21:55, Jonathan S. Katz wrote:
>>> * Encrypted TCP/IP connections using GSSAPI encryption
>>
>> +1, though I would s/GSSAPI encryption/ with s/GSSAPI authentcation/
>
> But you're not encrypting the communication using GSSAPI authenticati
Peter Eisentraut writes:
> * Add GSSAPI encryption support (Robbie Harwood, Stephen Frost)
> This allows TCP/IP connections to be encrypted when using GSSAPI
> authentication without having to set up a separate encryption facility
> like SSL.
Hmm, does that imply that you don't have to hav
On 2019-09-17 21:55, Jonathan S. Katz wrote:
>> * Encrypted TCP/IP connections using GSSAPI encryption
>
> +1, though I would s/GSSAPI encryption/ with s/GSSAPI authentcation/
But you're not encrypting the communication using GSSAPI authentication,
you're encrypting it using GSSAPI encryption.
>
On 9/17/19 1:09 PM, Peter Eisentraut wrote:
>> * Client- and server-side encryption for authentication using GSSAPI
>
> This is on the wire encryption, so I don't know why it says client-side
> and server-side. Proposal:
>
> * Encrypted TCP/IP connections using GSSAPI encryption
+1, though I wo
> * Client- and server-side encryption for authentication using GSSAPI
This is on the wire encryption, so I don't know why it says client-side
and server-side. Proposal:
* Encrypted TCP/IP connections using GSSAPI encryption
in the major features section, and later
* Add GSSAPI encryption supp
