Horton

Re: Negotiating the SCRAM channel binding type

Tom Lane <tgl@sss.pgh.pa.us>

View thread View on postgr.es
From: Tom Lane <tgl@sss.pgh.pa.us>
To: Heikki Linnakangas <hlinnaka@iki.fi>
Cc: Michael Paquier <michael@paquier.xyz>, pgsql-hackers <pgsql-hackers@postgresql.org>
Date: 2018-08-05T16:01:04Z
Lists: pgsql-hackers 
Heikki Linnakangas <hlinnaka@iki.fi> writes:
> Sorry, I see now that there was indeed a test for 
> scram_channel_binding='', which meant "no channel binding". That was 
> confusing, I assumed '' was the default.

Ugh, it isn't?  There's a general principle in libpq that setting a
parameter to an empty string is the same as leaving it unset.  I think
violating that pattern is a bad idea.

			regards, tom lane

Commits

  1. Remove support for tls-unique channel binding.