Message-ID: <67726b008fa31d00d9a38257b3d1673b8afff2dd.camel@j-davis.com>
Subject: Re: Add "password_protocol" connection parameter to libpq
From: Jeff Davis <pgsql@j-davis.com>
To: Michael Paquier <michael@paquier.xyz>, Peter Eisentraut
	 <peter.eisentraut@2ndquadrant.com>
Cc: "Jonathan S. Katz" <jkatz@postgresql.org>, Stephen Frost
	 <sfrost@snowman.net>, pgsql-hackers@postgresql.org
Date: Tue, 13 Aug 2019 09:25:53 -0700
In-Reply-To: <20190813025634.GF2551@paquier.xyz>
References: <20190809030021.GG3194@paquier.xyz>
	 <3bbf5968ea705700a2605d6db74d8510bea7940b.camel@j-davis.com>
	 <20190809100922.GI3194@paquier.xyz>
	 <20190809132850.GL16436@tamriel.snowman.net>
	 <609482826475e0063c7d71b2449ae31c0d61b232.camel@j-davis.com>
	 <071e45a6-97f7-1614-371c-98ecb03aed65@postgresql.org>
	 <daf0017a1a5c2caabf88a4e00f66b4fcbdfeccad.camel@j-davis.com>
	 <7a7a2f07-d013-eb80-85ba-9edaaf845038@2ndquadrant.com>
	 <95b40ddcb3897772f075e6891521ee3f06f443d1.camel@j-davis.com>
	 <93653d2b-7cf7-6992-7d3e-600ffd461354@2ndquadrant.com>
	 <20190813025634.GF2551@paquier.xyz>
Content-Type: text/plain; charset="UTF-8"
Mime-Version: 1.0
Content-Transfer-Encoding: 7bit
Precedence: bulk

On Tue, 2019-08-13 at 11:56 +0900, Michael Paquier wrote:
> I tend to prefer #2 as well and that's the kind of approach we were
> tending to agree on when we discussed this issue during the v11 beta
> for the downgrade issues with libpq.  And as you say extend it so as
> we can apply filtering of more AUTH_REQ requests, inclusing GSS and
> krb5.

Can you please offer a concrete proposal? I know the proposals I've put
out aren't perfect (otherwise there wouldn't be three of them), so if
you have something better, please share.

Regards,
	Jeff Davis