Received: from malur.postgresql.org ([217.196.149.56])
	by arkaria.postgresql.org with esmtps  (TLS1.3) tls
 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.94.2)
	(envelope-from <pgsql-docs-owner+archive@lists.postgresql.org>)
	id 1sP2kq-002c3v-BI
	for pgsql-docs@arkaria.postgresql.org; Wed, 03 Jul 2024 16:22:48 +0000
Received: from localhost ([127.0.0.1] helo=malur.postgresql.org)
	by malur.postgresql.org with esmtp (Exim 4.94.2)
	(envelope-from <pgsql-docs-owner+archive@lists.postgresql.org>)
	id 1sP2ko-00Ac1q-A9
	for pgsql-docs@arkaria.postgresql.org; Wed, 03 Jul 2024 16:22:47 +0000
Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29])
	by malur.postgresql.org with esmtps  (TLS1.3) tls
 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.94.2)
	(envelope-from <tgl@sss.pgh.pa.us>)
	id 1sP2ko-00Ac1i-2Y
	for pgsql-docs@lists.postgresql.org; Wed, 03 Jul 2024 16:22:46 +0000
Received: from sss.pgh.pa.us ([68.162.161.243])
	by magus.postgresql.org with esmtps  (TLS1.3) tls
 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.94.2)
	(envelope-from <tgl@sss.pgh.pa.us>)
	id 1sP2kn-000FM3-1N
	for pgsql-docs@lists.postgresql.org; Wed, 03 Jul 2024 16:22:46 +0000
Received: from sss1.sss.pgh.pa.us (localhost [127.0.0.1])
	by sss.pgh.pa.us (8.15.2/8.15.2) with ESMTP id 463GMh4E3260795;
	Wed, 3 Jul 2024 12:22:43 -0400
From: Tom Lane <tgl@sss.pgh.pa.us>
To: Daniel Gustafsson <daniel@yesql.se>
cc: pgsql-docs <pgsql-docs@lists.postgresql.org>
Subject: Re: Document when ssl_prefer_server_ciphers went in
In-reply-to: <5D7E0F5E-E620-4D54-8788-66D421AC76F0@yesql.se>
References: <5D7E0F5E-E620-4D54-8788-66D421AC76F0@yesql.se>
Comments: In-reply-to Daniel Gustafsson <daniel@yesql.se>
	message dated "Wed, 03 Jul 2024 11:23:25 +0200"
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-ID: <3260793.1720023763.1@sss.pgh.pa.us>
Content-Transfer-Encoding: quoted-printable
Date: Wed, 03 Jul 2024 12:22:43 -0400
Message-ID: <3260794.1720023763@sss.pgh.pa.us>
List-Id: <pgsql-docs.lists.postgresql.org>
List-Help: <https://lists.postgresql.org/manage/>
List-Subscribe: <https://lists.postgresql.org/manage/>
List-Post: <mailto:pgsql-docs@lists.postgresql.org>
List-Owner: <mailto:pgsql-docs-owner@lists.postgresql.org>
List-Archive: <https://www.postgresql.org/list/pgsql-docs>
Archived-At: 
 <https://www.postgresql.org/message-id/3260794.1720023763%40sss.pgh.pa.us>
Precedence: bulk

Daniel Gustafsson <daniel@yesql.se> writes:
> In the documentation for ssl_prefer_server_ciphers we only say it's not =
in
> "older version" but we omit to specify it further.  Since it's a fairly
> important setting for security I think it makes sense to add the version=
 to
> help users, as in the small attached diff (which also adds proper markup=
 in the
> paragraph while in there).

This could be shortened perhaps:

-        Older PostgreSQL versions do not have this setting and always use=
 the
+        <productname>PostgreSQL</productname> versions before 9.4 do not =
have this setting and always use the

			regards, tom lane