Message-Id: <199906160014.UAA39517@hub.org>
To: Nigel Tamplin <adt09@dial.pipex.com>
cc: pgsql-interfaces@postgreSQL.org
Subject: Re: [INTERFACES] Secure or encrypted way to connect to Postgres? 
In-Reply-To: Message from Nigel Tamplin <adt09@dial.pipex.com> of "Tue,
	15 Jun 1999 23:42:52 +0100." <3766D6EC.76CC7DE6@dial.pipex.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Date: Wed, 16 Jun 1999 10:14:41 +1000
From: Colin McCormack <colin@field.medicine.adelaide.edu.au>

I was thinking about this, and found an innovative potential solution in 
fetchmail (of all places.)

sshd will redirect connections.  fetchmail has a facility permitting it to 
connect to sshd on the remote machine, then redirect that connection to the 
POP or IMAP port on that machine.  So you have to be able to ssh in, and then 
your connection en clar only travels on the server machine.

You also get gzip compression of the stream for free (with ssh.)

I think the openSSL people have some similar kinds of facilities, called 
ssltunnel or something.

I recommend you consider this kind of approach, as it's minimally 
interventionist, uses existing code, and very strong crypto.

Colin

> Is it possible to connect to Postgres via a secure or encrypted session
> of some kind?
> 
> If so what interfaces support it, JDBC? libpq? ...
> 
> I want to access a db on a remote machine and don't want people snooping
> the network traffic.
> 
> Thanks,
> 
> Nigel
> email:
> adt09@dial.pipex.com
> 
>