From 0d45cd96fd0f3387d1bcf7e6f873c73c4f251df8 Mon Sep 17 00:00:00 2001 From: Bruce Momjian Date: Tue, 11 Sep 2018 17:01:51 -0400 Subject: [PATCH] doc: adjust PG 11 release notes Fixes for channel binding, SQL procedures, and pg_trgm. Backpatch-through: 11 --- doc/src/sgml/release-11.sgml | 15 +++++---------- 1 file changed, 5 insertions(+), 10 deletions(-) diff --git a/doc/src/sgml/release-11.sgml b/doc/src/sgml/release-11.sgml index cf66a9afc6d..684d34c0914 100644 --- a/doc/src/sgml/release-11.sgml +++ b/doc/src/sgml/release-11.sgml @@ -1942,7 +1942,7 @@ same commits as above --> - Add SQL procedures, which can start and commit their own + Add SQL-level procedures, which can start and commit their own transactions (Peter Eisentraut) @@ -2685,15 +2685,10 @@ same commits as above - While SCRAM always prevents the - replay of transmitted hashed passwords in a later session, - SCRAM with channel binding can also prevent - man-in-the-middle attacks. However, since there is no way - to force channel binding in libpq, - the feature currently does not prevent man-in-the-middle - attacks when using libpq and interfaces built using it. It is - expected that future versions of libpq and interfaces not built - using libpq, e.g. JDBC, will allow this capability. + SCRAM cannot prevent man-in-the-middle attacks + unless it can be forced. Unfortunately, there is no way to do + this in libpq. This is expected in future versions of libpq + and in interfaces not built using libpq, e.g. JDBC.