Horton
Menu

Re: How to configure client-side TLS ciphers for streaming replication?

Rob Sargent <robjsargent@gmail.com>

View thread
From: Rob Sargent <robjsargent@gmail.com>
To: Z xx <xxz030811@gmail.com>
Cc: Laurenz Albe <laurenz.albe@cybertec.at>, pgsql-general@lists.postgresql.org
Date: 2025-08-26T13:55:54Z
Lists: pgsql-general 

> On Aug 26, 2025, at 5:35 AM, xx Z <xxz030811@gmail.com> wrote:
> 
> 
> Thanks for your suggestion.
> But I still want to know why we can't set "ssl_ciphers" on the client side.
> This is still considered a security issue in some cases, and PostgreSQL has mature capabilities on the master side to implement this functionality.
> 
> Greetings,
> Yunfei Zhou
> 

What is your attack/exposure scenario?