public inbox for [email protected]  
help / color / mirror / Atom feed
From: Pantelis Theodosiou <[email protected]>
To: [email protected]
To: [email protected]
Subject: Re: Basic security
Date: Sat, 24 Feb 2018 17:22:32 +0000
Message-ID: <CAE3TBxzPfRr0JXHa82iq0YESK8K68RsAGwp87V8TZmdzM+OXmw@mail.gmail.com> (raw)
In-Reply-To: <[email protected]>
References: <[email protected]>

Your link is for an old version of Postgres (8.3). Current version is 10.
You can find the link for the relaive page easily, it's on the top of the
page, if you use a different version that 10 (I hope you are not still at
8.3 !)

https://www.postgresql.org/docs/current/static/auth-pg-hba-conf.html

On Sat, Feb 24, 2018 at 3:59 PM, PG Doc comments form <
[email protected]> wrote:

> The following documentation comment has been logged on the website:
>
> Page: https://www.postgresql.org/docs/8.3/static/auth-pg-hba-conf.html
> Description:
>
> My  pg_hba.conf file gives 'cert' as an authentication method.  this is not
> mentioned on this page.
>
> I think a basic pg_hba.conf to allow remote access require ssl, and to
> prevent access to the postgres table would be a useful addition.
> The more I see about this powerful environment the more nervous I get about
> exploits based on aspects of it's multitude of features of which I am
> completely unaware - what about PUBLIC for example ? ?
> A basic security guide to disable dangerous defaults would be very welcome
>


view thread (2+ messages)

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: [email protected]
  Cc: [email protected], [email protected], [email protected]
  Subject: Re: Basic security
  In-Reply-To: <CAE3TBxzPfRr0JXHa82iq0YESK8K68RsAGwp87V8TZmdzM+OXmw@mail.gmail.com>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox