Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1pG5Op-000159-KC for pgsql-docs@arkaria.postgresql.org; Thu, 12 Jan 2023 21:46:16 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1pG5Oo-0002TQ-28 for pgsql-docs@arkaria.postgresql.org; Thu, 12 Jan 2023 21:46:14 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1pG5On-0002TH-OQ for pgsql-docs@lists.postgresql.org; Thu, 12 Jan 2023 21:46:13 +0000 Received: from meldrar.postgresql.org ([2a02:c0:301:0:ffff::31]) by makus.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1pG5Ol-0005Wj-83 for pgsql-docs@lists.postgresql.org; Thu, 12 Jan 2023 21:46:12 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=postgresql.org; s=20171124; h=Content-Type:In-Reply-To:From:References:To: Subject:MIME-Version:Date:Message-ID:Sender:Reply-To:Cc: Content-Transfer-Encoding:Content-ID:Content-Description; bh=agC4wfhY1yQCP18MplyRmZPrZteSvPMYAypMvsStfho=; b=usnYDIFiP/E2K79Q9TSJZ4lP+8 zrFMfAilrBz0nrVDzNys8pn4SYiy/RMqdPjKUcZSthDx2UYQce1mA5jJo+i672y6tzmnMQssBVrZf lAg+MyglPUOxUbzVHbp/tVK2xcuzQ9LZV2fH4i+du3sZaFZmd81A9gqeTg4vABjrK9vp0tr6gahyq EIRm/oejsuNKIjjZwZbaac5qUZsZ60H3fMdtZdpbehHaQdjcJQKOJ/AqobSJHM5NkOSjrc/OZHDy6 zDeGSE2vCm7AsBVaM652l+WOCQVGkzOr/SqT96+a0NVvDTPb+b6HoTL0K3DiwBAZ7aYfT3YEPeFn3 w1OUjVhw==; Received: from [52.119.84.106] (helo=[192.168.88.177]) by meldrar.postgresql.org with esmtpsa (TLS1.3:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.92) (envelope-from ) id 1pG5Og-0004a8-3i; Thu, 12 Jan 2023 21:46:09 +0000 Message-ID: <37a6a45c-ee93-041d-664e-12399a021ac6@postgresql.org> Date: Thu, 12 Jan 2023 16:46:02 -0500 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:102.0) Gecko/20100101 Thunderbird/102.6.1 Subject: Re: Tightening the trust auth advice To: Magnus Hagander , Pg Docs References: Content-Language: en-US From: "Jonathan S. Katz" In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="------------UHbXepRV0bVjaQceqn4EY395" X-Host-Lookup-Failed: Reverse DNS lookup failed for 52.119.84.106 (failed) List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------UHbXepRV0bVjaQceqn4EY395 Content-Type: multipart/mixed; boundary="------------o9LDrbeq30swLSBt37HCIURO"; protected-headers="v1" From: "Jonathan S. Katz" To: Magnus Hagander , Pg Docs Message-ID: <37a6a45c-ee93-041d-664e-12399a021ac6@postgresql.org> Subject: Re: Tightening the trust auth advice References: In-Reply-To: --------------o9LDrbeq30swLSBt37HCIURO Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64 T24gMS8xMi8yMyA0OjMyIEFNLCBNYWdudXMgSGFnYW5kZXIgd3JvdGU6DQo+IFRoZSBwYWdl IGF0IGh0dHBzOi8vd3d3LnBvc3RncmVzcWwub3JnL2RvY3MvY3VycmVudC9hdXRoLXRydXN0 Lmh0bWwgDQo+IDxodHRwczovL3d3dy5wb3N0Z3Jlc3FsLm9yZy9kb2NzL2N1cnJlbnQvYXV0 aC10cnVzdC5odG1sPiBnb2VzIHRocm91Z2ggDQo+IHNvbWUgbGVuZ3RoIHRvIGV4cGxhaW4g d2h5IFRydXN0IGlzIHNvbWV0aW1lcyBhIGdvb2QgaWRlYS4NCj4gDQo+IElzIGl0IHJlYWxs eSB0aG91Z2g/IEFuZCBpbiBwYXJ0aWN1bGFyLCBhcmVuJ3QgdGhlcmUgYmV0dGVyIGNob2lj ZXM/DQoNClRoaXMgZmlyc3QgY2FzZSBpdCBsaXN0cyBzb3VuZHMgbGlrZSBhIGdvb2QgY2Fz ZSBmb3IgInBlZXIiIA0KYXV0aGVudGljYXRpb24uLi5hbmQgdGhlIG11bHRpLXVzZXIgY2Fz ZSBpdCBsaXN0cyBhbHNvIHNvdW5kcyBsaWtlIGEgZ29vIA0KdXNlIGZvciAicGVlciIuDQoN ClRoZSBjYXNlIHRoYXQgSSB0aGluayAidHJ1c3QiIGlzIGdvb2QgYXQsIHdoaWNoIHdlIGRv bid0IGxpc3QsIGlzIGRvaW5nIA0KbG9jYWwgZGV2ZWxvcG1lbnQgLyB0ZXN0aW5nIG9mIFBH Lg0KDQo+IEFzIGEgZmlyc3Qgc3RlcCwgSSB0aGluayB3ZSBzaG91bGQgcHV0IGEgPHdhcm5p bmc+IGJveCBvbiB0aGUgcGFnZSANCj4gZXhwbGljaXRseSBzYXlpbmcgdGhhdCB0aGF0IHRy dXN0LCB1bmxlc3MgbGltaXRlZCBpbiBwZ19oYmEsIHdpbGwgYWxsb3cgDQo+IGFueSB1c2Vy IHRvIGJlY29tZSBzdXBlcnVzZXIgd2hpY2ggYWxsb3dzIHRoZW0gdG8gYnlwYXNzIGFsbCBv dGhlciANCj4gc2VjdXJpdHkgcmVzdHJpY3Rpb25zLg0KDQorMQ0KDQo+IFNlY29uZCwgd2Un cmUga2luZCBvZiBnb2luZyBvdXQgb2Ygb3VyIHdheSB0byByZWNvbW1lbmQgc2V0dGluZyB1 bml4IA0KPiBzb2NrZXQgcGVybWlzc2lvbnMgZXRjIC0tIGluIHRob3NlIGNhc2VzLCB3b3Vs ZG4ndCBpdCBpbiBhbG1vc3QgZXZlcnkgDQo+IGNhc2UganVzdCBiZSBiZXR0ZXIgZm9yIHRo ZSB1c2VyIHRvIHVzZSAicGVlciIgYXV0aCBpbnN0ZWFkIG9mIHRydXN0LCANCj4gYW5kIHdl IHNob3VsZCByZWNvbW1lbmQgdGhlbSB0byB1c2UgdGhhdCBpbnN0ZWFkPyBJcyBpdCByZWFs bHkgYW55IGxlc3MgDQo+IGFwcHJvcHJpYXRlIGFuZC9vciBjb252ZW5pZW50PyAoSXQgd2Fz IGxpc3RlZCBhcyBhcHByb3ByaWF0ZSBiYWNrIGluIA0KPiAyMDAxIGluwqA2ZjBmNWJmMmZi ZSwgYnV0IHRoZSB3b3JsZCBoYXMgY2hhbmdlZCBhIGJpdCBpbiAyMCsgeWVhcnMuLikNCg0K WWVhaCwgSSB0aGluayBmb3J3YXJkaW5nIGZvbGtzIHRvIHRoZSBkb2N1bWVudGF0aW9uIG9u ICJwZWVyIiBpcyBhIGdvb2QgDQppZGVhIGhlcmUuIEkgZG9uJ3Qga25vdyBpZiB3ZSB3YW50 IHRvIGtlZXAgYW55IGxhbmd1YWdlIGFyb3VuZCBmb3IgDQpoaXN0b3JpY2FsIGNvbnRleHQg IlByaW9yIHRvICJwZWVyIiBhdXRoLCAidHJ1c3QiIHdhcyB1c2VkIGZvciB0aGlzIGJ1dCAN Cm9uIG1vZGVybiBzeXN0ZW1zIHlvdSBjYW4gdXNlICJwZWVyIiBpbnN0ZWFkIGZvciBiZXR0 ZXIgc2VjdXJpdHkuIg0KDQo+IEFuZCBmaW5hbGx5LCB0aGUgc2VudGVuY2UgIkl0IGlzIHNl bGRvbSByZWFzb25hYmxlIHRvIHVzZSB0cnVzdCBmb3IgYW55IA0KPiBUQ1AvSVAgY29ubmVj dGlvbnMgb3RoZXIgdGhhbiB0aG9zZSBmcm9tIGxvY2FsaG9zdCAoMTI3LjAuMC4xKS4iIHNo b3VsZCANCj4gcHJvYmFibHkgYmUgYW1lbmRlZCB3aXRoIGFuICIsIGFuZCBvbmx5IHJlYXNv bmFibGUgZm9yIGxvY2FsaG9zdCBpZiB5b3UgDQo+IHRydXN0IGV2ZXJ5IHNpbmdsZSB1c2Vy IG9uIHRoZSBob3N0Ij8NCg0KSSdkIGludmVydCBpdDogIkl0IGlzIG5vdCByZWNvbW1lbmRl ZCB0byB1c2UgInRydXN0IiBmb3IgYW55IFRDUC9JUCANCihub24tbG9jYWwpIGNvbm5lY3Rp b24uIFlvdSBzaG91bGQgdXNlICJ0cnVzdCIgd2l0aCBsb2NhbGhvc3QgDQooMTI3LjAuMC4x KSBjb25uZWN0aW9ucyBvbmx5IGlmIHlvdSB0cnVzdCBldmVyeSBzaW5nbGUgdXNlciBvbiB0 aGF0IGhvc3QuIg0KDQo+IFRob3VnaHRzPyBJJ2xsIGJlIGhhcHB5IHRvIHdvcmsgdXAgYSBw YXRjaCBpZiB0aGVyZSdzIGFncmVlbWVudCBvbiB0aGUgDQo+IGdlbmVyYWwgaWRlYS4NCg0K UmVhZGluZyB0aHJvdWdoIHRoaXMsIEknbSBub3Qgc2hvY2tlZCB0aGVyZSdzIHN0aWxsIGEg Z29vZCBhbW91bnQgb2YgDQoidHJ1c3QiIHByZXZhbGVudCBpbiB0aGUgd2lsZC4gSSBhZ3Jl ZSB3aXRoIHRpZ2h0ZW5pbmcgdGhpcyB1cC4NCg0KSm9uYXRoYW4NCg0K --------------o9LDrbeq30swLSBt37HCIURO-- --------------UHbXepRV0bVjaQceqn4EY395 Content-Type: application/pgp-signature; name="OpenPGP_signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="OpenPGP_signature" -----BEGIN PGP SIGNATURE----- wsF5BAABCAAjFiEE+oS2la8r95ogZD/x8QSccp8cZScFAmPAf5oFAwAAAAAACgkQ8QSccp8cZSdx MA/+IHBntk0tmxFdi4XX2tdgBxI7YIhVzUe6ojwDDy52u0QJSl30feDcgnpk/v2d5FpoThSbRzj1 3EbRcbu4fYO8A9n1XBSp8l/eMDodF88jTn5EgwWnS+r89hYhe69t3LDVuWe4OVZTMItduVjdBnHs 3Rcw7H0medRJ//HvJi9IT2yIlom3RYr6hbULRoVO8YE8Uv1gT/VWOZyDv7AaGGak99HVC/Oh5h2v twC/LBtkGHEDsF9CnsM1vVW3cSCiURqcjfh2xst4c12s863MPTElngi/uCR6K2pnYk3o7Zy3ymeE L4RxZkOOOFRJ5cRryK7CZJDLR2CHE6C6HfIjZY9RZITgTiC2GdWvZZ3G/7bc+0mhiDTQtuY8UWlq IEMR9fhI9U/+CB2vGoJXigeDgLmtsb6Ye4o+zEVG82th7hiD0/TJz1IEODF/WTYqDx9FGerUYEfw mKwoSTAiSodgGz1toC0sEXlLt/HeAqM3tgW1ZvpCBLokdfMRXE9Jq6DCuPPaB0f98JuDMlXC+KBR Ei/BH2/fN7Yv8JKd/loSiFOcCZc7hO35Wx1u48kPLaGspmQO5NU8wrWq9FQqUWAowJn1Djp34396 u2Nw36S7TEnA2mEC+wzinu705/f64/kjHHbmOtlPfalAZd6rEVyZWe/EbZqvxKQ7nn+6aQnBrSXw ueI= =tI74 -----END PGP SIGNATURE----- --------------UHbXepRV0bVjaQceqn4EY395--