From: Tom Lane <tgl@sss.pgh.pa.us>
To: Stephen Frost <sfrost@snowman.net>
cc: Heikki Linnakangas <hlinnaka@iki.fi>, Bruce Momjian <bruce@momjian.us>,
        Magnus Hagander <magnus@hagander.net>,
        =?iso-8859-1?Q?=C1lvaro_Hern=E1ndez?= Tortosa <aht@8kdata.com>,
        Andres Freund <andres@anarazel.de>,
        pgsql-hackers <pgsql-hackers@postgresql.org>
Subject: Re: Some thoughts about SCRAM implementation
In-reply-to: <20170412164204.GC9812@tamriel.snowman.net>
References: <20170410183230.oxagjpfgj6xxmcwx@alap3.anarazel.de>
 <fd4530e0-f016-4eb9-a0d0-e32824482db5@8kdata.com>
 <20170412004118.GC20340@momjian.us>
 <20170412005830.GU9812@tamriel.snowman.net>
 <20170412012532.GF20340@momjian.us>
 <CABUevEwJO6QNmZVzARPf-nePv07ne1R=o73VQ2Oq6cn_+beJ_w@mail.gmail.com>
 <ee93b36d-59d2-35e6-dd0c-fb7c9cc65e0c@iki.fi>
 <20170412152629.GI20340@momjian.us>
 <20a91441-fa4c-ec2c-d813-c549066b8055@iki.fi> <8328.1492013344@sss.pgh.pa.us>
 <20170412164204.GC9812@tamriel.snowman.net>
Comments: In-reply-to Stephen Frost <sfrost@snowman.net>
	message dated "Wed, 12 Apr 2017 12:42:04 -0400"
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-ID: <24528.1492017106.1@sss.pgh.pa.us>
Date: Wed, 12 Apr 2017 13:11:46 -0400
Message-ID: <24529.1492017106@sss.pgh.pa.us>
Precedence: bulk
Sender: pgsql-hackers-owner@postgresql.org

Stephen Frost <sfrost@snowman.net> writes:
> * Tom Lane (tgl@sss.pgh.pa.us) wrote:
>> ... which the user can't tell apart from having fat-fingered the password,
>> I suppose?  Doesn't sound terribly friendly.  A report of a certificate
>> mismatch is far more likely to lead people to realize there's a MITM.

> We might be able to improve on that.

I'd sure be happier about this being a useful feature if we can.  But
unless someone has a design for that ready-to-go, that's another good
reason to put it off.

			regards, tom lane


-- 
Sent via pgsql-hackers mailing list (pgsql-hackers@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-hackers