Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtp (Exim 4.80) (envelope-from ) id 1YuPjJ-0000Fm-Rn for pgsql-hackers@arkaria.postgresql.org; Mon, 18 May 2015 18:25:33 +0000 Received: from localhost ([127.0.0.1] helo=postgresql.org) by malur.postgresql.org with smtp (Exim 4.80) (envelope-from ) id 1YuPjJ-0000AH-82 for pgsql-hackers@arkaria.postgresql.org; Mon, 18 May 2015 18:25:33 +0000 Received: from makus.postgresql.org ([2001:4800:1501:1::229]) by malur.postgresql.org with esmtps (TLS1.2:RSA_AES_256_CBC_SHA256:256) (Exim 4.80) (envelope-from ) id 1YuPjF-0008V4-On for pgsql-hackers@postgresql.org; Mon, 18 May 2015 18:25:29 +0000 Received: from mx-out.zmailcloud.com ([192.198.85.98] helo=mx-out-1.zmailcloud.com) by makus.postgresql.org with esmtp (Exim 4.84) (envelope-from ) id 1YuPjC-00045S-Tt for pgsql-hackers@postgresql.org; Mon, 18 May 2015 18:25:28 +0000 Received: from smtp.01.com (smtp.01.com [10.10.0.43]) by mx-out-1.zmailcloud.com (Postfix) with ESMTP id 837B2563FB3; Mon, 18 May 2015 13:25:26 -0500 (CDT) Received: from localhost (localhost [127.0.0.1]) by smtp-out-1.01.com (Postfix) with ESMTP id 63DF6A0346; Mon, 18 May 2015 13:25:26 -0500 (CDT) X-Virus-Scanned: amavisd-new at smtp-out-1.01.com Received: from smtp.01.com ([127.0.0.1]) by localhost (smtp-out-1.01.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QsYNu9s6-0SF; Mon, 18 May 2015 13:25:26 -0500 (CDT) Received: from smtp.01.com (localhost [127.0.0.1]) by smtp-out-1.01.com (Postfix) with ESMTP id 27278A02F6; Mon, 18 May 2015 13:25:26 -0500 (CDT) Received: from localhost (localhost [127.0.0.1]) by smtp-out-1.01.com (Postfix) with ESMTP id 0C691A033A; Mon, 18 May 2015 13:25:26 -0500 (CDT) X-Virus-Scanned: amavisd-new at smtp-out-1.01.com Received: from smtp.01.com ([127.0.0.1]) by localhost (smtp-out-1.01.com [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id W9yOG12zv38j; Mon, 18 May 2015 13:25:25 -0500 (CDT) Received: from [172.47.23.104] (50-0-190-244.dsl.dynamic.fusionbroadband.com [50.0.190.244]) by smtp-out-1.01.com (Postfix) with ESMTPSA id 1F630A02F6; Mon, 18 May 2015 13:25:25 -0500 (CDT) Message-ID: <555A2E94.1000703@agliodbs.com> Date: Mon, 18 May 2015 11:25:24 -0700 From: Josh Berkus Organization: PostgreSQL Experts Inc. User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.6.0 MIME-Version: 1.0 To: =?UTF-8?B?Vm9sa2VyIEHDn21hbm4=?= CC: Stephen Frost , Tom Lane , Andrew Dunstan , Alvaro Herrera , "pgsql-hackers@postgresql.org" Subject: Re: Disabling trust/ident authentication configure option References: <554A797B.1010101@dunslane.net> <6837.1430946793@sss.pgh.pa.us> <554A9898.9040407@agliodbs.com> <20150507150254.GA30322@tamriel.snowman.net> <20150507205749.GE30322@tamriel.snowman.net> <55596375.7070601@agliodbs.com> In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-Pg-Spam-Score: -1.9 (-) List-Archive: List-Help: List-ID: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: X-Mailing-List: pgsql-hackers Precedence: bulk Sender: pgsql-hackers-owner@postgresql.org On 05/17/2015 08:58 PM, Josh Berkus wrote: > You've added exactly one additional step in their way, and not a > particularly difficult one. It simply doesn't solve the problem you're > trying to solve, which is unsurprising, because technology has never > been able to solve the problem of untrustworthy humans with positions of > responsibility. BTW, here I'm addressing Volker and other supporters of the "compile-time option", not Robert. -- Josh Berkus PostgreSQL Experts Inc. http://pgexperts.com -- Sent via pgsql-hackers mailing list (pgsql-hackers@postgresql.org) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-hackers