public inbox for [email protected]  

help / color / mirror / Atom feed

From: =?utf-8?B?RXJpY2EgWmhhbmc=?= <[email protected]>
To: =?utf-8?B?UGV0ZXIgRWlzZW50cmF1dA==?= <[email protected]>
To: =?utf-8?B?cGdzcWwtaGFja2Vycw==?= <[email protected]>
Subject: Re:Re: Add support to TLS 1.3 cipher suites and curves lists
Date: Fri, 7 Jun 2024 18:02:37 +0800
Message-ID: <[email protected]> (raw)

Hi Peter,
Thanks a lot for the quick response. We are using Postgres instance in our product. For some security consideration, we prefer to use TLS1.3 cipher suites in our product with some customization values instead of default value "HIGH:MEDIUM:+3DES:!aNULL". Moreover we prefer to set a group of ecdh keys instead of a single value.


I see the https://commitfest.postgresql.org/48/ is still open, could it be possible to target for PG17? As I know PG17 is going to be release this year so that we can upgrade our instances to this new version accodingly.
                       
Original Email
                       
                     

Sender:"Peter Eisentraut"< [email protected] &gt;;

Sent Time:2024/6/7 16:55

To:"Erica Zhang"< [email protected] &gt;;"pgsql-hackers"< [email protected] &gt;;

Subject:Re: Add support to TLS 1.3 cipher suites and curves lists


On 07.06.24 08:10, Erica Zhang wrote:
&gt; I’m a Postgres user and I’m looking into restricting the set of allowed 
&gt; ciphers on Postgres and configure a concrete set of curves on our 
&gt; postgres instances.

Out of curiosity, why is this needed in practice?

&gt; Could you please help to review to see if you are interested in having 
&gt; this change in upcoming Postgres major release(It's should be PG17)?

It would be targetting PG18 now.

view thread (2+ messages)

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: [email protected]
  Cc: [email protected], [email protected], [email protected]
  Subject: Re:Re: Add support to TLS 1.3 cipher suites and curves lists
  In-Reply-To: <[email protected]>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox