From: Colin McCormack <colin@field.medicine.adelaide.edu.au>
To: Nigel Tamplin <adt09@dial.pipex.com>
Cc: pgsql-interfaces@postgreSQL.org
Subject: Re: [INTERFACES] Secure or encrypted way to connect to Postgres?
Date: Wed, 16 Jun 1999 10:14:41 +1000
Message-ID: <199906160014.UAA39517@hub.org> (raw)
In-Reply-To: <adt09@dial.pipex.com> <3766D6EC.76CC7DE6@dial.pipex.com>
I was thinking about this, and found an innovative potential solution in
fetchmail (of all places.)
sshd will redirect connections. fetchmail has a facility permitting it to
connect to sshd on the remote machine, then redirect that connection to the
POP or IMAP port on that machine. So you have to be able to ssh in, and then
your connection en clar only travels on the server machine.
You also get gzip compression of the stream for free (with ssh.)
I think the openSSL people have some similar kinds of facilities, called
ssltunnel or something.
I recommend you consider this kind of approach, as it's minimally
interventionist, uses existing code, and very strong crypto.
Colin
> Is it possible to connect to Postgres via a secure or encrypted session
> of some kind?
>
> If so what interfaces support it, JDBC? libpq? ...
>
> I want to access a db on a remote machine and don't want people snooping
> the network traffic.
>
> Thanks,
>
> Nigel
> email:
> adt09@dial.pipex.com
>
>
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-interfaces@postgresql.org
Cc: colin@field.medicine.adelaide.edu.au, adt09@dial.pipex.com
Subject: Re: [INTERFACES] Secure or encrypted way to connect to Postgres?
In-Reply-To: <199906160014.UAA39517@hub.org>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox