diff --git a/doc/src/sgml/release-11.sgml b/doc/src/sgml/release-11.sgml index cf66a9afc6d..684d34c0914 100644 --- a/doc/src/sgml/release-11.sgml +++ b/doc/src/sgml/release-11.sgml @@ -1942,7 +1942,7 @@ same commits as above --> - Add SQL procedures, which can start and commit their own + Add SQL-level procedures, which can start and commit their own transactions (Peter Eisentraut) @@ -2685,15 +2685,10 @@ same commits as above - While SCRAM always prevents the - replay of transmitted hashed passwords in a later session, - SCRAM with channel binding can also prevent - man-in-the-middle attacks. However, since there is no way - to force channel binding in libpq, - the feature currently does not prevent man-in-the-middle - attacks when using libpq and interfaces built using it. It is - expected that future versions of libpq and interfaces not built - using libpq, e.g. JDBC, will allow this capability. + SCRAM cannot prevent man-in-the-middle attacks + unless it can be forced. Unfortunately, there is no way to do + this in libpq. This is expected in future versions of libpq + and in interfaces not built using libpq, e.g. JDBC.