Received: from makus.postgresql.org (makus.postgresql.org [98.129.198.125]) by mail.postgresql.org (Postfix) with ESMTP id 958DAAD7E31 for ; Sun, 17 Jun 2012 14:02:53 -0300 (ADT) Received: from oproxy7-pub.bluehost.com ([67.222.55.9]) by makus.postgresql.org with smtp (Exim 4.72) (envelope-from ) id 1SgIsG-0007Uf-Kc for pgsql-hackers@postgresql.org; Sun, 17 Jun 2012 17:02:53 +0000 Received: (qmail 29024 invoked by uid 0); 17 Jun 2012 17:02:38 -0000 Received: from unknown (HELO host159.hostmonster.com) (74.220.207.159) by oproxy7.bluehost.com with SMTP; 17 Jun 2012 17:02:38 -0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=timbira.com; s=default; h=Content-Transfer-Encoding:Content-Type:In-Reply-To:References:Subject:CC:To:MIME-Version:From:Date:Message-ID; bh=2HM9qUEkXcPtVzhvTMn91xolYH/ndaUj5RRGtg3LpZA=; b=IA8MvmXV9q5JOKy3y6UYkMuqcR37FkFtsZBzOSuZt0esxpwRDyiDYDap6NU9bHlXjbncxtbRnbLZkpBqh/6EOqTGivsbRRaU3qVo9lZNuI15lQLPX9QGwMha6EaVQpRP; Received: from [201.34.9.253] (port=60399 helo=[10.3.2.3]) by host159.hostmonster.com with esmtpsa (TLSv1:CAMELLIA256-SHA:256) (Exim 4.76) (envelope-from ) id 1SgIs2-0006rW-Ep; Sun, 17 Jun 2012 11:02:38 -0600 Message-ID: <4FDE0CCD.3070102@timbira.com> Date: Sun, 17 Jun 2012 13:58:53 -0300 From: Euler Taveira User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:10.0.4) Gecko/20120510 Icedove/10.0.4 MIME-Version: 1.0 To: Magnus Hagander CC: Tom Lane , Florian Pflug , Bruce Momjian , Pgsql Hackers Subject: Re: libpq compression References: <4FD9698F.2090407@timbira.com> <29853.1339651170@sss.pgh.pa.us> <4FD9E70B.9040607@timbira.com> <11502.1339699384@sss.pgh.pa.us> <20120615021938.GA21704@momjian.us> <22690C61-E960-4A2A-BFD5-DAD3D3B5C474@phlo.org> <4FDB954F.9010606@timbira.com> <5136.1339799120@sss.pgh.pa.us> <5365.1339799869@sss.pgh.pa.us> <11357.1339822502@sss.pgh.pa.us> <19804.1339859730@sss.pgh.pa.us> <26283.1339947738@sss.pgh.pa.us> In-Reply-To: X-Enigmail-Version: 1.4.1 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Identified-User: {1651:host159.hostmonster.com:timbirac:timbira.com} {sentby:smtp auth 201.34.9.253 authed with euler@timbira.com} X-Pg-Spam-Score: -1.1 (-) X-Archive-Number: 201206/846 X-Sequence-Number: 209686 On 17-06-2012 12:45, Magnus Hagander wrote: > On Sun, Jun 17, 2012 at 11:42 PM, Tom Lane wrote: >> Magnus Hagander writes: >>> Is there a reason why we don't have a parameter on the client >>> mirroring ssl_ciphers? >> >> Dunno, do we need one? I am not sure what the cipher negotiation process >> looks like or which side has the freedom to choose. > Both. Client sends a cipher list and the server determines which cipher is used getting the first supported cipher in the client list. > I haven't looked into the details, but it seems reasonable that > *either* side should be able to at least define a list of ciphers it > *doens't* want to talk with. > +1. -- Euler Taveira de Oliveira - Timbira http://www.timbira.com.br/ PostgreSQL: Consultoria, Desenvolvimento, Suporte 24x7 e Treinamento