Re: Fwd: [PATCHES] Preliminary GSSAPI Patches
Josh Berkus <josh@agliodbs.com>
From: Josh Berkus <josh@agliodbs.com>
To: pgsql-hackers@postgresql.org
Cc: Magnus Hagander <magnus@hagander.net>, "Henry B. Hotz" <hotz@jpl.nasa.gov>
Date: 2007-05-01T20:00:45Z
Lists: pgsql-hackers
Magnus, > I'd also vote for changing the name of the "non encrypted" version to > just "gss" instead of "gss-np". I don't. We'll want to support GSS encryption once we have the code, so we should leave the namespace open to address that. > Oh, and I do think putting in GSSAPI authentication only (and not > encryption) is the way to go for now, since we can do encryption with > OpenSSL. It'll make the changes localized to just the authentication. For now, yes. In the long run, we want to provide users with other methods of encrypted connections than the rather flaky and not-available-on-every-platform OpenSSL. -- --Josh Josh Berkus PostgreSQL @ Sun San Francisco