Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1sOwcG-0026Ua-AN for pgsql-docs@arkaria.postgresql.org; Wed, 03 Jul 2024 09:49:32 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1sOwcE-007Jpw-8C for pgsql-docs@arkaria.postgresql.org; Wed, 03 Jul 2024 09:49:30 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1sOwcE-007Jpo-10 for pgsql-docs@lists.postgresql.org; Wed, 03 Jul 2024 09:49:30 +0000 Received: from fout5-smtp.messagingengine.com ([103.168.172.148]) by makus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1sOwcC-000BG0-3Y for pgsql-docs@lists.postgresql.org; Wed, 03 Jul 2024 09:49:29 +0000 Received: from compute5.internal (compute5.nyi.internal [10.202.2.45]) by mailfout.nyi.internal (Postfix) with ESMTP id 6831F138037A; Wed, 3 Jul 2024 05:49:27 -0400 (EDT) Received: from mailfrontend2 ([10.202.2.163]) by compute5.internal (MEProxy); Wed, 03 Jul 2024 05:49:27 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=eisentraut.org; h=cc:content-transfer-encoding:content-type:content-type:date :date:from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:subject:subject:to:to; s=fm1; t=1720000167; x=1720086567; bh=+tWncGjD7y4YMXNFoPjWmptLlmvQtaqWazv6z3qh34I=; b= YjWqtn6yNn6VR0FGXxqA6HrCZ8exXWGF0sIdW3bJaAisM+SQqoOMqEc2Up67UH+G 1MMDuCbysFysqVqS/zKAYoeZDraGz38D2ECeIBKQUEgFJwvzfrTj1TDMPkZ6XGd/ mPvRCcBqocs1lWR2EiJ4gp2ivWbLT+AkL7/IshF5xDS8wAigll5hKi1gwqDDyqG1 y6r2sJW+04mFTo7+strVqP7+DG0xVP3r52GMxaxPFve6BZ7mq4Y0gUaWnMxop3kf boZ7RRRdpKlXay6FbGZq1s2X9IWydI7k1QE7SHNw3Hp24TTxEzy2sZ1ycX96CXiS qTq2o7MZOT9gyFTZAGFlDQ== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to:x-me-proxy:x-me-proxy :x-me-sender:x-me-sender:x-sasl-enc; s=fm2; t=1720000167; x= 1720086567; bh=+tWncGjD7y4YMXNFoPjWmptLlmvQtaqWazv6z3qh34I=; b=v JscqKRp82GNgNCo96pjD3h7KtRffQTK+zNj5sQg08z+jyx789k7awMQzBEOo/nae QwHr2RRpUAGvAjTySIdweda0wAqjr7+52FkjBESkR8U3lpRMeEuzb0Q3HqSi1NcZ KbP3HGLEb6yE2Z+at0IQQpocOnE95uKEjLRHHIuC267tH/JymN69NZCQhpTJ1vhc SDZ92/dNxwxvkEEqvMk4b7J8L/GknTI51apMZGNtZCU9ldRcyhhG480hYEItLzOe hbtFypjaJlCrMZsDLg/GV0bJnGWpD5sFgKsBHWKjL+ebHQAL4KFfEbQvULon5xlh Vlpshp1I1svHdVd7fOVqQ== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeeftddrudejgddvudcutefuodetggdotefrodftvf curfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfghnecu uegrihhlohhuthemuceftddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmdenuc fjughrpefkffggfgfuvfhfhfgjtgfgsehtjeertddtvdejnecuhfhrohhmpefrvghtvghr ucfgihhsvghnthhrrghuthcuoehpvghtvghrsegvihhsvghnthhrrghuthdrohhrgheqne cuggftrfgrthhtvghrnhepheeivdfhuefhueeggfefheegjedtveeuhfethfeufedvudfg tdeuhefgfeduhfffnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehmrghilh hfrhhomhepphgvthgvrhesvghishgvnhhtrhgruhhtrdhorhhg X-ME-Proxy: Feedback-ID: ie0a040ee:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Wed, 3 Jul 2024 05:49:26 -0400 (EDT) Message-ID: <652fc014-8721-4ec4-9a16-c93420ba3e6a@eisentraut.org> Date: Wed, 3 Jul 2024 11:49:25 +0200 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: Document when ssl_prefer_server_ciphers went in To: Daniel Gustafsson , pgsql-docs References: <5D7E0F5E-E620-4D54-8788-66D421AC76F0@yesql.se> Content-Language: en-US From: Peter Eisentraut In-Reply-To: <5D7E0F5E-E620-4D54-8788-66D421AC76F0@yesql.se> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk On 03.07.24 11:23, Daniel Gustafsson wrote: > In the documentation for ssl_prefer_server_ciphers we only say it's not in > "older version" but we omit to specify it further. Since it's a fairly > important setting for security I think it makes sense to add the version to > help users, as in the small attached diff (which also adds proper markup in the > paragraph while in there). Looks reasonable to me. Would it make sense to remove the setting altogether?