On 07/15/2016 09:55 AM, Tom Lane wrote:
I'm inclined to think that a better answer than changing libpq's behavior is to encourage DBAs to specify "hostssl" in pg_hba.conf for all external connections.
Do those packagers who install dummy certificates and turn SSL on also change their pg_hba.conf.sample files to use hostssl?. That could go a long way towards encouraging people.
cheers andrew -- Sent via pgsql-hackers mailing list (pgsql-hackers@postgresql.org) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-hackers
