rdelaage/postgresql
1
0
Fork 0
mirror of https://git.postgresql.org/git/postgresql.git synced 2024-09-30 11:01:16 +02:00
Code Issues Packages Projects Releases Wiki Activity

doc: adjust PG 11 release notes

Browse Source 
Fixes for channel binding, SQL procedures, and pg_trgm.

Backpatch-through: 11
This commit is contained in:
Bruce Momjian 2018-09-11 17:01:51 -04:00
parent fedc97cdfd
commit 0d45cd96fd
1 changed files with 5 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
doc/src/sgml/release-11.sgml
View File

@ -1942,7 +1942,7 @@ same commits as above
-->
<para>
Add SQL procedures, which can start and commit their own
Add SQL-level procedures, which can start and commit their own
transactions (Peter Eisentraut)
</para>
@ -2685,15 +2685,10 @@ same commits as above
</para>
<para>
While <acronym>SCRAM</acronym> always prevents the
replay of transmitted hashed passwords in a later session,
<acronym>SCRAM</acronym> with channel binding can also prevent
man-in-the-middle attacks. However, since there is no way
to <emphasis>force</emphasis> channel binding in libpq,
the feature currently does not prevent man-in-the-middle
attacks when using libpq and interfaces built using it. It is
expected that future versions of libpq and interfaces not built
using libpq, e.g. JDBC, will allow this capability.
<acronym>SCRAM</acronym> cannot prevent man-in-the-middle attacks
unless it can be forced. Unfortunately, there is no way to do
this in libpq. This is expected in future versions of libpq
and in interfaces not built using libpq, e.g. JDBC.
</para>
</listitem>