From: Robbie Harwood <rharwood@redhat.com>
To: Stephen Frost <sfrost@snowman.net>
Cc: Dmitry Dolgov <9erthalion6@gmail.com>,
 Michael Paquier <michael@paquier.xyz>, Heikki Linnakangas <hlinnaka@iki.fi>,
 PostgreSQL-development <pgsql-hackers@postgresql.org>, nico@cryptonector.com
Subject: Re: [PATCH v19] GSSAPI encryption support
In-Reply-To: <20181203212047.GM3415@tamriel.snowman.net>
References: <jlg1tgq1ktm.fsf@thriss.redhat.com> <jlg1se287n3.fsf@redhat.com>
 <jlg602phyn5.fsf@redhat.com> <82e75cb9-9676-6852-74de-1454a5cc97d7@iki.fi>
 <20180806143633.GJ27724@tamriel.snowman.net> <jlgd0uvyysv.fsf@redhat.com>
 <20181002013258.GY11712@paquier.xyz> <jlgk1n0dpf3.fsf@redhat.com>
 <CA+q6zcXE6QuP2u=LW0MUG5fOsE7=kQva4kuNcm37hJ=yEzo+tg@mail.gmail.com>
 <20181203212047.GM3415@tamriel.snowman.net>
Date: Tue, 04 Dec 2018 18:46:53 -0500
Message-ID: <jlgsgzc26tu.fsf@redhat.com>
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-=";
	micalg=pgp-sha512; protocol="application/pgp-signature"
Precedence: bulk

--=-=-=
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

Stephen Frost <sfrost@snowman.net> writes:

> Greetings Robbie,
>
> * Dmitry Dolgov (9erthalion6@gmail.com) wrote:
>> > On Tue, Oct 2, 2018 at 11:12 PM Robbie Harwood <rharwood@redhat.com> w=
rote:
>> >
>> > Michael Paquier <michael@paquier.xyz> writes:
>> >
>> > > On Mon, Aug 06, 2018 at 05:23:28PM -0400, Robbie Harwood wrote:
>> > >> If you're in a position where you're using Kerberos (or most other
>> > >> things from the GSSAPI) for authentication, the encryption comes at
>> > >> little to no additional setup cost.  And then you get all the secur=
ity
>> > >> benefits outlined in the docs changes.
>> > >
>> > > Please note that the last patch set does not apply anymore, so I have
>> > > moved it to CF 2018-11 and marked it as waiting on author.
>> >
>> > Indeed.  Please find v19 attached.  It's just a rebase; no architecture
>> > changes.
>>=20
>> Unfortunately, patch needs another rebase, could you do this? In the mea=
ntime
>> I'll move it to the next CF.
>
> This patch needs a few minor changes to get it back to working, but I'm
> happy to say that with those changes, it seems to be working rather well
> for me.

Thanks Stephen!

Dmitry, I will make an update (and address Stephen's feedback) hopefully
soon.

Thanks,
=2D-Robbie

--=-=-=
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEA5qc6hnelQjDaHWqJTL5F2qVpEIFAlwHEe0ACgkQJTL5F2qV
pEK/sw/+K8vYf7w8DgLRn9TmOT/zCJRGLv5Muz5jQy3D1AbTEuHtt+aeXy6ZyzTf
tECk5TXi+dJ7liOOr2d4KEz73tSrKLyePKNtBDTZaMgIelR7T0lshX38hcE10LBb
GIRN4IQcl6StG2rCLyx0Zsmw4rgQNT8h5D1lEZQEBnRJCiOhdYWwhVt70B9MZkDE
53Wr/b+3O1U62KSXcNftvnXhhW2iqaDZHNGdgmG4yucXGAZi/5mvmN7WcYCpI8V/
3R510e2B0chnRPKtBRBPzqbaUHab5Ww6OB8yo7TTF2lepzs0Lp8cj53b0QghYd5h
rCeNltfPQRRQnjREfBizGCWElNY8SSC+xAETuEdCNl01Ads3AOi3cIXZ+FJVLO/a
/nbvMOKJeYzxRRjB0U/XxFPmhNxVrCj4Mu0o315LZSQsCHasP+itEC/VXsjkXDJc
l9oTzPsUHnAVH20aT3TVR3zluJKVD7ipFb2itbfpHeRL/Dunzc1PdIetAWjJjnvb
/PYxN0UsTqQZ9wWTZceGX3L2xLPfTU31V7yYBBI+yfqLHL8ZTN5XCMkd667SF0KJ
tn+Mn9eQfAmXmHf627EBSodnP/lvxx1mG/IZ/Y8xyELuhwRG3EhtclBgKsG25eRF
8tX3n3LwSW0ZilbvifzS/Kr4axrL6mGeu1PobMV1oxmAiAe3ap0=
=x0EP
-----END PGP SIGNATURE-----
--=-=-=--