| |||||||||||||
A serious PostgreSQL security fixA serious PostgreSQL security fixPosted Apr 7, 2013 22:40 UTC (Sun) by hummassa (subscriber, #307)In reply to: A serious PostgreSQL security fix by cesarb Parent article: A serious PostgreSQL security fix
IIRC correctly my SSL/TLS, the authentication (and the start of encrypting the whole session) comes before anything else. I suppose when the client asks for connection to a database, he is already autheticated via his cert (and the dbms can check if he can effectively connect to *that* particular db).
(Log in to post comments)
|
|||||||||||||