Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1w42fN-001oF5-2c for pgsql-hackers@arkaria.postgresql.org; Sat, 21 Mar 2026 20:11:26 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.96) (envelope-from ) id 1w42fL-00BY9K-2q for pgsql-hackers@arkaria.postgresql.org; Sat, 21 Mar 2026 20:11:24 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1w42fL-00BY9B-1a for pgsql-hackers@lists.postgresql.org; Sat, 21 Mar 2026 20:11:24 +0000 Received: from smtp.outgoing.loopia.se ([93.188.3.37]) by magus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.98.2) (envelope-from ) id 1w42fI-00000000OZl-2m1m for pgsql-hackers@lists.postgresql.org; Sat, 21 Mar 2026 20:11:23 +0000 Received: from s807.loopia.se (localhost [127.0.0.1]) by s807.loopia.se (Postfix) with ESMTP id 0B0C758417A for ; Sat, 21 Mar 2026 21:11:20 +0100 (CET) Received: from s981.loopia.se (unknown [172.22.191.6]) by s807.loopia.se (Postfix) with ESMTP id E5A16582E1A; Sat, 21 Mar 2026 21:11:19 +0100 (CET) Received: from localhost (unknown [172.22.191.6]) by s981.loopia.se (Postfix) with ESMTP id E2C1A22B161A; Sat, 21 Mar 2026 21:11:19 +0100 (CET) X-Virus-Scanned: amavis at amavis.loopia.se X-Spam-Flag: NO X-Spam-Score: -1.2 X-Spam-Level: X-Spam-Status: No, score=-1.2 tagged_above=-999 required=6.2 tests=[ALL_TRUSTED=-1, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1] autolearn=disabled Authentication-Results: s474.loopia.se (amavis); dkim=pass (2048-bit key) header.d=yesql.se Received: from s981.loopia.se ([172.22.191.5]) by localhost (s474.loopia.se [172.22.190.14]) (amavis, port 10024) with UTF8LMTP id P1W5EHp7LCwJ; Sat, 21 Mar 2026 21:11:19 +0100 (CET) X-Loopia-Auth: user X-Loopia-User: daniel@yesql.se X-Loopia-Originating-IP: 89.255.232.236 Received: from smtpclient.apple (customer-89-255-232-236.stosn.net [89.255.232.236]) (Authenticated sender: daniel@yesql.se) by s981.loopia.se (Postfix) with ESMTPSA id 7331222B16BE; Sat, 21 Mar 2026 21:11:19 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yesql.se; s=loopiadkim1707475645; t=1774123879; bh=Wxq+Gkg/BcXxARGTl3/uz6ffL2tchwYH8Hx6Jg2uknc=; h=Subject:From:In-Reply-To:Date:Cc:References:To; b=v6FmanJLK3xTKtcjbyJYQ9ry5tdAR5/utSNMvD3A70cQVqoxPWlpw/yVc3jhpYT0U pvZoPpla2KJjaGnC74DewYqcZYOWeOjYp99uyJ3QXFNpr3zFhXSKeFIAx8Ot3c6zTd LEgqKNftl3j4iKdpbx5PX4oLEPZ7vUXaXsT6ZdE/RZXmnlOhZBNL8Yyf98Qv53w9WK DUrEjLli0Bbqj54+Zpcd/+A4rq1V+9w+TSzwuIa9NwazRRFDa8RYYs2d/rpvi1N4AD Q4Fa0T6WMp+K0b2UOoYYlndtUa5qnqq+Ncs8ap3K6QYZtfynFQqstfXaFE3R5YUx+G kgUCkvti8aaBQ== Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3776.700.51.11.2\)) Subject: Re: Proposal: Implementing Botan as an alternative TLS backend for PostgreSQL From: Daniel Gustafsson In-Reply-To: Date: Sat, 21 Mar 2026 21:11:09 +0100 Cc: PostgreSQL Hackers , Enrique Soriano , Gorka Guardiola Content-Transfer-Encoding: quoted-printable Message-Id: <9C26F7E9-80F4-400C-B5F4-A32992ABDBE0@yesql.se> References: To: Javier Gutierrez-Maturana sanchez X-Mailer: Apple Mail (2.3776.700.51.11.2) List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk > On 21 Mar 2026, at 19:44, Javier Gutierrez-Maturana sanchez = wrote: > I would like to start a discussion regarding the feasibility of = decoupling our current TLS implementation to allow for alternative = cryptographic backends, specifically **Botan** (via its C wrapper). You should perhaps start by doing basic level research, since we did = that over a decade ago. -- Daniel Gustafsson