Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1jbAgn-0007CS-AM for pgsql-pkg-yum@arkaria.postgresql.org; Tue, 19 May 2020 22:26:21 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1jbAgl-0000qx-Ob for pgsql-pkg-yum@arkaria.postgresql.org; Tue, 19 May 2020 22:26:19 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1jbAgl-0000qq-JG for pgsql-pkg-yum@lists.postgresql.org; Tue, 19 May 2020 22:26:19 +0000 Received: from ns5.gunduz.org ([107.170.136.15] helo=ns1.gunduz.org) by makus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1jbAge-00042U-1E for pgsql-pkg-yum@postgresql.org; Tue, 19 May 2020 22:26:18 +0000 Received: from asus-laptop06.gunduz.org (unknown [31.14.249.174]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ns1.gunduz.org (Postfix) with ESMTPSA id 903693FD51; Tue, 19 May 2020 22:26:10 +0000 (UTC) Message-ID: <6089d4c8e262dd6fe8a6510c283e674543a24b5c.camel@gunduz.org> Subject: Re: Can we stop defaulting to 'ident'? From: Devrim =?ISO-8859-1?Q?G=FCnd=FCz?= To: Stephen Frost Cc: Craig Ringer , pgsql-pkg-yum Date: Tue, 19 May 2020 23:26:07 +0100 In-Reply-To: <20200519212710.GQ13712@tamriel.snowman.net> References: <7761d006b5ace13a4d86ce489123e5004aaf8b6c.camel@gunduz.org> <20200519212710.GQ13712@tamriel.snowman.net> Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="=-NNQJAR8J9nV+y847n3H7" User-Agent: Evolution 3.36.2 (3.36.2-1.fc32) MIME-Version: 1.0 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk --=-NNQJAR8J9nV+y847n3H7 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi, On Tue, 2020-05-19 at 17:27 -0400, Stephen Frost wrote: > +1 to scram-sha-256 for the default for host-based/TCP connections.=20 > For local, we should be using peer, just like Debian's default has > been for ages. YEah, this is what I committed just now. Still, would love to hear from others if there are any objections. I used --pwfile=3D/dev/zero during initdb. Regards, --=20 Devrim G=C3=BCnd=C3=BCz Open Source Solution Architect, Red Hat Certified Engineer Twitter: @DevrimGunduz , @DevrimGunduzTR --=-NNQJAR8J9nV+y847n3H7 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEH8GKHNUOKtDEiyD22MM9/pLPbrUFAl7EXP8ACgkQ2MM9/pLP brUcHg//SDLmOOnpTeZ+BM6UR/g+y1pTdcUPWNwg6Z6RDTuEsNqvDoUFMelIxo+B PwB9/uhuPLtFTEKZY8dHyef+35pimaVWUWD/H+vbSwDuHLXrwgZfOsbEYaKQJ0HQ kZhgdEgu6gOVM6VxuiJoD0dqgor46oK7gPxCiA+/RoK5oTUiwFrd7LS2DvxVUXGF wdbGWYI8CrG4Sno9lBiDK10xdf7eqS7Fcubnr5kOVk2JkLEJjB6B3AkyDr4Xuqjn PqDUURsaSrmbfAPo/n+Lw7DXtN9U0Nbs67Lepl/QeHWof844kgD/1d08Zi+jNGVw qZS3cvvZXxvk+XDt/4fEkyqs9jkM5QC8aUGDMXN7FK/4rN7LSh+w2100c9dg116b mWY34dNrJG+XJDNIlXE5ooS5W4eSlP54yc4jw42S/eqVlDfvY8rc7e3d6YxkxApR dL+mb9dRWD33zEAIugFemmKT+/lZcNHANIfOcLYIgGhUzGQy11UCGNmI7f7voLh2 JaqDK7BUTBcnmIQgbHLZ39cJs+Va3a3zE6n48K5JUFM1HTJ0yVMYUSaHhLEsoFs5 7hl7hzok9t2KR/KJZQvGxODQPYeNlNZrFfvpRomqSPwnJNovIrQFaR8XkgTVBbSF pZ22hnTZs4n2zszaHgn2BVGnPtHoGJPM9qf6JGk5jMJndO1uimE= =yVfP -----END PGP SIGNATURE----- --=-NNQJAR8J9nV+y847n3H7--