Horton

Re: Channel binding for post-quantum cryptography

Michael Paquier <michael@paquier.xyz>

View thread
From: Michael Paquier <michael@paquier.xyz>
To: Filip Janus <fjanus@redhat.com>
Cc: Pgsql Hackers <pgsql-hackers@postgresql.org>, Heikki Linnakangas <hlinnaka@iki.fi>, Jacob Champion <jacob.champion@enterprisedb.com>, Daniel Gustafsson <daniel@yesql.se>
Date: 2025-11-02T00:30:18Z
Lists: pgsql-hackers

Commits

Same data as JSON: GET /api/v1/messages/:b64id/commits the thread's linked commits as JSON, with link sources. API reference →

  1. Fix handling of SCRAM-SHA-256's channel binding with RSA-PSS certificates

On Fri, Oct 31, 2025 at 10:26:01AM +0100, Filip Janus wrote:
> While fixing the actual issue will take some time, I’ve fixed the requested
> test.
> Since I’m still quite new to the PG community, would it make sense to
> propose a patch that only adds the test?

Yes, we could add a test that tracks the current behavior first.  That
would be half of the job already done until we figure out the details
of the implementation, changing the test once we know which approach
makes the most sense.

Not sure how the others feel about that, but I'm OK with that.
--
Michael