postgres.git / summary / log / commit / refs

commit    0d45cd96fd0f3387d1bcf7e6f873c73c4f251df8
Author:   Bruce Momjian <bruce@momjian.us>
Date:     Tue Sep 11 21:01:51 2018 +0000

    doc:  adjust PG 11 release notes
    
    Fixes for channel binding, SQL procedures, and pg_trgm.
    
    Backpatch-through: 11


 doc/src/sgml/release-11.sgml | 15 +++++----------
 1 file changed, 5 insertions(+), 10 deletions(-)

diff --git a/doc/src/sgml/release-11.sgml b/doc/src/sgml/release-11.sgml
index cf66a9afc6d..684d34c0914 100644
--- a/doc/src/sgml/release-11.sgml
+++ b/doc/src/sgml/release-11.sgml
@@ -1942,7 +1942,7 @@ same commits as above
 -->
 
        <para>
-        Add SQL procedures, which can start and commit their own
+        Add SQL-level procedures, which can start and commit their own
         transactions (Peter Eisentraut)
        </para>
 
@@ -2685,15 +2685,10 @@ same commits as above
        </para>
 
        <para>
-        While <acronym>SCRAM</acronym> always prevents the
-        replay of transmitted hashed passwords in a later session,
-        <acronym>SCRAM</acronym> with channel binding can also prevent
-        man-in-the-middle attacks.  However, since there is no way
-        to <emphasis>force</emphasis> channel binding in libpq,
-        the feature currently does not prevent man-in-the-middle
-        attacks when using libpq and interfaces built using it.  It is
-        expected that future versions of libpq and interfaces not built
-        using libpq, e.g. JDBC, will allow this capability.
+        <acronym>SCRAM</acronym> cannot prevent man-in-the-middle attacks
+        unless it can be forced.  Unfortunately, there is no way to do
+        this in libpq.  This is expected in future versions of libpq
+        and in interfaces not built using libpq, e.g. JDBC.
        </para>
       </listitem>
 


[parent: fedc97cdfd83]