[Proposal] [Postgrex] SCRAM-SHA-256-PLUS

[Snehil Shah]

Hello,

I wanted to propose adding support for SCRAM channel binding (SCRAM-SHA-256-PLUS) to Postgrex. I'm happy to contribute a PR for the same.

Currently, Postgrex only uses SCRAM-SHA-256 without channel binding, even if the server supports it. I think it should support the more secure mechanism wherever the server advertises support for it.

We can further provide a client-side option called channel_binding, which can be prefer/require/disable, to configure behavior similar to libpq.

Happy to discuss any design proposals, or get to work on a PR if this would be welcome.

Thanks!

[José Valim]

Please do try a PR!

José Valim

https://dashbit.co/

--
You received this message because you are subscribed to the Google Groups "elixir-ecto" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elixir-ecto...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/elixir-ecto/36531307-0717-4044-bb00-f70d3d3bfe8an%40googlegroups.com.

[Snehil Shah]

Tried: https://github.com/elixir-ecto/postgrex/pull/776. Happy to iterate on anything.