Re: unclear wording re: spoofing prevention on network connections

2023-12-09 Thread Stephen Frost
Greetings, On Sat, Dec 9, 2023 at 18:02 David G. Johnston wrote: > On Saturday, December 9, 2023, Stephen Frost wrote: > >> >> >> The idea is that you can use both TLS and GSSAPI-with-encryption at the >> same time within a given cluster for connections but you wouldn’t use them >> on the same

Re: unclear wording re: spoofing prevention on network connections

2023-12-09 Thread David G. Johnston
On Saturday, December 9, 2023, Stephen Frost wrote: > > > The idea is that you can use both TLS and GSSAPI-with-encryption at the > same time within a given cluster for connections but you wouldn’t use them > on the same connection. Certainly would welcome suggestions as to the best > way to phr

Re: unclear wording re: spoofing prevention on network connections

2023-12-09 Thread Stephen Frost
Greetings, On Sat, Dec 9, 2023 at 17:29 Bruce Momjian wrote: > On Fri, Dec 8, 2023 at 05:42:27PM +, PG Doc comments form wrote: > > The following documentation comment has been logged on the website: > > > > Page: https://www.postgresql.org/docs/16/preventing-server-spoofing.html > > Descri

Re: unclear wording re: spoofing prevention on network connections

2023-12-09 Thread Bruce Momjian
On Fri, Dec 8, 2023 at 05:42:27PM +, PG Doc comments form wrote: > The following documentation comment has been logged on the website: > > Page: https://www.postgresql.org/docs/16/preventing-server-spoofing.html > Description: > > When I read: > To prevent spoofing on TCP connections, either

unclear wording re: spoofing prevention on network connections

2023-12-09 Thread PG Doc comments form
The following documentation comment has been logged on the website: Page: https://www.postgresql.org/docs/16/preventing-server-spoofing.html Description: When I read: To prevent spoofing on TCP connections, either use SSL certificates and make sure that clients check the server's certificate, or