Re: [PATCH v18] GSSAPI encryption support

Stephen Frost <sfrost@snowman.net>

From: Stephen Frost <sfrost@snowman.net>
To: Heikki Linnakangas <hlinnaka@iki.fi>
Cc: Robbie Harwood <rharwood@redhat.com>, PostgreSQL mailing lists <pgsql-hackers@postgresql.org>, Nico Williams <nico@cryptonector.com>
Date: 2018-08-06T14:36:34Z
Lists: pgsql-hackers
Heikki,

* Heikki Linnakangas (hlinnaka@iki.fi) wrote:
> Sorry if this sounds facetious, but:
> 
> What is the point of this patch? What's the advantage of GSSAPI encryption
> over SSL? I was hoping to find the answer by reading the documentation
> changes, but all I can see is "how" to set it up, and nothing about "why".

If you've already got an existing Kerberos environment, then it's a lot
nicer to leverage that rather than having to also implement a full PKI
to support and use SSL-based encryption.

There's also something to be said for having alternatives to OpenSSL.

Thanks!

Stephen

Commits

  1. GSSAPI encryption support

  2. Fix typo