Message-ID: <13ec5d8fc5e3c58053a8762634a4921e3387f57d.camel@cybertec.at>
Subject: Re: can we mark upper/lower/textlike functions leakproof?
From: Laurenz Albe <laurenz.albe@cybertec.at>
To: Joe Conway <mail@joeconway.com>, Tom Lane <tgl@sss.pgh.pa.us>, Robert
 Haas <robertmhaas@gmail.com>
Cc: Andrew Dunstan <andrew@dunslane.net>, David Rowley
 <dgrowleyml@gmail.com>,  PostgreSQL Hackers
 <pgsql-hackers@lists.postgresql.org>
Date: Thu, 01 Aug 2024 13:17:22 +0200
In-Reply-To: <70b9e758-1050-4365-9d67-cc826faaf6a9@joeconway.com>
References: <fa7903f6-b050-4c62-aa52-6f6d5d345770@dunslane.net>
	 <CAApHDvr36T+9XZYTRkHkGm82Wo5YY6wXwkRDceu2-cyGEvHzjw@mail.gmail.com>
	 <50d3a76e-afaa-44ed-aef5-6fb7f23cccab@dunslane.net>
	 <5bef8bb0-7a50-4bcf-b052-2a12c3cda0f5@joeconway.com>
	 <CA+Tgmob78LN+Tkgms=dQyBsLyGWBuehv7_kEvBfjwmj6fDsr7g@mail.gmail.com>
	 <3416373.1722449026@sss.pgh.pa.us>
	 <70b9e758-1050-4365-9d67-cc826faaf6a9@joeconway.com>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
User-Agent: Evolution 3.52.3 (3.52.3-1.fc40) 
MIME-Version: 1.0
Archived-At: <https://www.postgresql.org/message-id/13ec5d8fc5e3c58053a8762634a4921e3387f57d.camel%40cybertec.at>
Precedence: bulk

On Wed, 2024-07-31 at 14:43 -0400, Joe Conway wrote:
> I still maintain that there is a whole host of users that would accept=
=20
> the risk of side channel attacks via existence of an error or not, if=20
> they could only be sure nothing sensitive leaks directly into the logs=
=20
> or to the clients. We should give them that choice.

I think that you are right.

But what do you tell the users who would not accept that risk?

Yours,
Laurenz Albe