From: Tom Lane <tgl@sss.pgh.pa.us>
To: Joe Conway <mail@joeconway.com>
cc: Laurenz Albe <laurenz.albe@cybertec.at>,
        Robert Haas <robertmhaas@gmail.com>,
        Andrew Dunstan <andrew@dunslane.net>,
        David Rowley <dgrowleyml@gmail.com>,
        PostgreSQL Hackers <pgsql-hackers@lists.postgresql.org>
Subject: Re: can we mark upper/lower/textlike functions leakproof?
In-reply-to: <e42ce45b-e9c3-4680-bbc4-b59c32cfc7d0@joeconway.com>
References: <fa7903f6-b050-4c62-aa52-6f6d5d345770@dunslane.net> <CAApHDvr36T+9XZYTRkHkGm82Wo5YY6wXwkRDceu2-cyGEvHzjw@mail.gmail.com> <50d3a76e-afaa-44ed-aef5-6fb7f23cccab@dunslane.net> <5bef8bb0-7a50-4bcf-b052-2a12c3cda0f5@joeconway.com> <CA+Tgmob78LN+Tkgms=dQyBsLyGWBuehv7_kEvBfjwmj6fDsr7g@mail.gmail.com> <3416373.1722449026@sss.pgh.pa.us> <70b9e758-1050-4365-9d67-cc826faaf6a9@joeconway.com> <13ec5d8fc5e3c58053a8762634a4921e3387f57d.camel@cybertec.at> <e42ce45b-e9c3-4680-bbc4-b59c32cfc7d0@joeconway.com>
Comments: In-reply-to Joe Conway <mail@joeconway.com>
	message dated "Thu, 01 Aug 2024 09:54:52 -0400"
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-ID: <3737862.1722522365.1@sss.pgh.pa.us>
Date: Thu, 01 Aug 2024 10:26:05 -0400
Message-ID: <3737863.1722522365@sss.pgh.pa.us>
Archived-At: <https://www.postgresql.org/message-id/3737863.1722522365%40sss.pgh.pa.us>
Precedence: bulk

Joe Conway <mail@joeconway.com> writes:
> On 8/1/24 07:17, Laurenz Albe wrote:
>> But what do you tell the users who would not accept that risk?

> Document that the option should not be used if that is the case

Are you proposing that we invent two levels of leakproofness
with different guarantees?  That seems like a mess, not least
because there are going to be varying opinions about where we
should set the bar for the lower level.

			regards, tom lane