Re: Thoughts on a "global" client configuration?
Christoph Berg <myon@debian.org>
From: Christoph Berg <myon@debian.org>
To: Robert Haas <robertmhaas@gmail.com>
Cc: Jacob Champion <jacob.champion@enterprisedb.com>, PostgreSQL Hackers <pgsql-hackers@postgresql.org>, Andrew Dunstan <andrew@dunslane.net>
Date: 2025-10-13T20:30:52Z
Lists: pgsql-hackers
Re: Robert Haas > So you support calling it libpq.so.5 forever, no matter how much we change? I would say SONAME/ABI/API breakages are not a tool to promote better SSL settings. If we want to move to sslmode=verify-full by default, we should just do that. I don't see why adding extra ABI/API pain would make that transition any better for users. We can move to libpq6 if there are technical reasons, but the general pain will be long-lasting until the whole world has caught up. (Debian etc can switch pretty easily, but there's a gazillion of third-party things.) Christoph