[prev in list] [next in list] [prev in thread] [next in thread] 

List:       pgsql-hackers
Subject:    Re: SCRAM with channel binding downgrade attack
From:       Peter Eisentraut <peter.eisentraut () 2ndquadrant ! com>
Date:       2018-06-29 20:42:36
Message-ID: 41559c12-4656-14ec-2b64-0d1b9c1b43cb () 2ndquadrant ! com
[Download RAW message or body]

On 29.06.18 04:16, Michael Paquier wrote:
> I am able to find easily drafts of TLS 1.3, but I am not seeing an RFC
> associated to it, which would be the base document to rely on I
> guess...  So that's really hard to make any decision in this area
> without the real deal.  As far as I can see tls-unique could be
> deprecated and replaced, but from OpenSSL point of view it technically
> works.

At this point, I think we can leave it as is until they came out with a
new channel binding type.

-- 
Peter Eisentraut              http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services

[prev in list] [next in list] [prev in thread] [next in thread]