pg.ddx.io  pgsql-hackers@postgresql.org mailing list archive  

help / color / mirror / Atom feed
From: Peter Eisentraut <peter.eisentraut@2ndquadrant.com>
To: Lou Picciano <LouPicciano@comcast.net>
To: Tom Lane <tgl@sss.pgh.pa.us>
Cc: Bruce Momjian <bruce@momjian.us>
Cc: Kyotaro HORIGUCHI <horiguchi.kyotaro@lab.ntt.co.jp>
Cc: pgsql-hackers@postgresql.org
Subject: Re: pg_stat_ssl additions
Date: Thu, 29 Nov 2018 14:49:02 +0100
Message-ID: <d80f6c25-643f-a9b8-787e-3b05e2c13911@2ndquadrant.com> (raw)
In-Reply-To: <020C8C7E-B204-4C03-9803-6ACE368DE871@comcast.net>
References: <398754d8-6bb5-c5cf-e7b8-22e5f0983caf@2ndquadrant.com>
	<20181120.173122.55744021.horiguchi.kyotaro@lab.ntt.co.jp>
	<01e7dd28-6bcc-5c26-a77d-54340a51633f@2ndquadrant.com>
	<d8e4e6d9-4007-e115-86aa-8d5c2679696d@2ndquadrant.com>
	<20181128173454.GF24817@momjian.us>
	<14681.1543438891@sss.pgh.pa.us>
	<020C8C7E-B204-4C03-9803-6ACE368DE871@comcast.net>

On 29/11/2018 01:27, Lou Picciano wrote:
> Further, I’m not sure exposing details about Cert Issuer, etc. to
> non-privileged users is much of an issue. For the most part, in most use
> cases, ‘users’ should//would/ want to know what entity is the issuer. If
> we’re talking about client certs, most of this is readily readable
> anyway, no?

The debate is whether an unprivileged user should be able to read the
SSL information of *other* users' connections.

My opinion is no.

-- 
Peter Eisentraut              http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services




view thread (21+ messages)  latest in thread

Message-ID: <d80f6c25-643f-a9b8-787e-3b05e2c13911@2ndquadrant.com>
Permalink:  ../d80f6c25-643f-a9b8-787e-3b05e2c13911@2ndquadrant.com/
Also on:    postgresql.org/message-id/d80f6c25-643f-a9b8-787e-3b05e2c13911@2ndquadrant.com

 · 

reply
Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-hackers@postgresql.org
  Cc: peter.eisentraut@2ndquadrant.com, LouPicciano@comcast.net, tgl@sss.pgh.pa.us, bruce@momjian.us, horiguchi.kyotaro@lab.ntt.co.jp
  Subject: Re: pg_stat_ssl additions
  In-Reply-To: <d80f6c25-643f-a9b8-787e-3b05e2c13911@2ndquadrant.com>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox