MIME-Version: 1.0
References: 
 <CAOYmi+moTsgohh5Tf1gn7dBynARV9EFfWaBVPcJD9O=h6RkSCw@mail.gmail.com>
 <5bec3d4f-613f-425b-88c4-59e71c70f7d6@eisentraut.org>
 <t66lxwxgaxinug7zr4pgf72anhzkqwgrudmqnczgjdu4rv3ll5@jkcxvyvkgcqc>
 <CAOYmi+kc=YXZvZ8YtSPRt57N1Tp9_gRwyXfMO5TJYtCLnEXo1A@mail.gmail.com>
 <Z_QdtqYmSggALamF@msg.df7cb.de>
 <CAOYmi+=YjmfJ+U6RTHfiXEFt9xJzaHnnbNSgSKahWr774_xGdA@mail.gmail.com>
 <Z_RKf5IPsxD6YHCn@msg.df7cb.de>
 <CAOYmi+kt5UvPOXXXT9w_nHBNgcqiTQWS2j=D9qJaewvmO4iaAg@mail.gmail.com>
 <CAOYmi+m2-2TH5AP7-8Knm_gcSiEaZVPGeUkfZeCLmYH395MYgA@mail.gmail.com>
 <B2A4AB83-C99D-4DF7-A310-50BF857739DA@yesql.se> <Z_Uzde7a1lCFaqfW@momjian.us>
 <CAOYmi+mrYnuwMEnpYWA4FWFtDCe4rMKavDrKQPpV43u=zmR8Xg@mail.gmail.com>
 <96b5b38b-2fac-409f-b922-f7fd653bf847@technowledgy.de>
 <CAOYmi+m-q8VOPsFxB3D-CWf-T057h4XLqVPvCTudXyAj7-9vpA@mail.gmail.com>
 <bf7c3396-a9a2-4df7-aabd-6fed387e027b@technowledgy.de>
 <CAOYmi+mn_xhkQEyS5KG3zoSOrvskVx8mhD8x_Z+0LL9PaZo1gQ@mail.gmail.com>
 <18f84e6a-41cf-4313-8bea-6007868dd05a@technowledgy.de>
In-Reply-To: <18f84e6a-41cf-4313-8bea-6007868dd05a@technowledgy.de>
From: Jacob Champion <jacob.champion@enterprisedb.com>
Date: Tue, 8 Apr 2025 10:04:26 -0700
Message-ID: 
 <CAOYmi+=fhzr4Mm5MVwFa+pmwn-uSrPpjfYNfQ9EPBLh8xPV3cA@mail.gmail.com>
Subject: Re: [PoC] Federated Authn/z with OAUTHBEARER
To: Wolfgang Walther <walther@technowledgy.de>
Cc: Bruce Momjian <bruce@momjian.us>, Daniel Gustafsson <daniel@yesql.se>,
 Christoph Berg <myon@debian.org>,
	Andres Freund <andres@anarazel.de>, Peter Eisentraut <peter@eisentraut.org>,
 Tom Lane <tgl@sss.pgh.pa.us>,
	PostgreSQL Hackers <pgsql-hackers@postgresql.org>,
 Thomas Munro <thomas.munro@gmail.com>,
	Nazir Bilal Yavuz <byavuz81@gmail.com>, Antonin Houska <ah@cybertec.at>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: 
 <https://www.postgresql.org/message-id/CAOYmi%2B%3Dfhzr4Mm5MVwFa%2Bpmwn-uSrPpjfYNfQ9EPBLh8xPV3cA%40mail.gmail.com>
Precedence: bulk

On Tue, Apr 8, 2025 at 9:57=E2=80=AFAM Wolfgang Walther <walther@technowled=
gy.de> wrote:
> if it's really the case that cURL is that much worse

(it is not, but I am sympathetic to the argument that if you don't use
it, you don't need it in the process space)

> However, if the other deps are considered problematic as well, then the
> ship has already sailed, and there is not point for a special case here
> anymore.

I think this line of argument is unlikely to find traction. Upthread
there were people asking if we could maybe split out other
possibly-unused dependencies in the future, like Kerberos.

--Jacob