24 ms·

So, a VPN then?

• orev 4y ago
  A VPN generally connects networks, so that’s probably overkill for a database connection, but sure you could use one. Or something like stunnel, etc. or you could just use the built in feature already in Postgres. Why such resistance to simply having this option?
  • RL_Quine 4y ago
    It’s something akin to a layer violation to have a database server running openssl and encrypting its own communication. It isn’t it’s business at all.
    • imtringued 4y ago
      This is one of the most disappointing hackernews submissions I have seen in a while. I use a private CA and client certificate authentication. It might be overkill but it is easy to implement.