index 13bd819eb1d63ec3f5af65fbc9f2f7522100752d..9ed148ab8420114ba5210b89c9ff3d09dd33eb44 100644 (file)
</listitem>
</varlistentry>
+ <varlistentry>
+ <term><acronym>MITM</acronym></term>
+ <listitem>
+ <para>
+ <ulink
+ url="https://en.wikipedia.org/wiki/Man-in-the-middle_attack">
+ Man-in-the-middle attack</ulink>
+ </para>
+ </listitem>
+ </varlistentry>
+
<varlistentry>
<term><acronym>MSVC</acronym></term>
<listitem>
</listitem>
</varlistentry>
+ <varlistentry>
+ <term><acronym>SNI</acronym></term>
+ <listitem>
+ <para>
+ <ulink
+ url="https://en.wikipedia.org/wiki/Server_Name_Indication">
+ Server Name Indication</ulink>,
+ <ulink url="https://tools.ietf.org/html/rfc6066#section-3">RFC 6066</ulink>
+ </para>
+ </listitem>
+ </varlistentry>
+
<varlistentry>
<term><acronym>SPI</acronym></term>
<listitem>
index f5a753e5898c48a698e8341ba8e5511c1b4e10e9..03b33cfb7e453aa39e0d1d973e1203e7ed368688 100644 (file)
<listitem>
<para>
Disables anonymous cipher suites that do no authentication. Such
- cipher suites are vulnerable to man-in-the-middle attacks and
+ cipher suites are vulnerable to <acronym>MITM</acronym> attacks and
therefore should not be used.
</para>
</listitem>
index 441cc0da3a3921a4c4b675f3c62feb798b95be50..641970f2a612d3f9dbd5b273e4abccd78f3172ed 100644 (file)
<listitem>
<para>
By default, libpq sets the TLS extension <quote>Server Name
- Indication</quote> (SNI) on SSL-enabled connections. See <ulink
- url="https://tools.ietf.org/html/rfc6066#section-3">RFC 6066</ulink>
- for details. By setting this parameter to 0, this is turned off.
+ Indication</quote> (<acronym>SNI</acronym>) on SSL-enabled connections.
+ By setting this parameter to 0, this is turned off.
</para>
<para>
The Server Name Indication can be used by SSL-aware proxies to route
connections without having to decrypt the SSL stream. (Note that this
requires a proxy that is aware of the PostgreSQL protocol handshake,
- not just any SSL proxy.) However, SNI makes the destination host name
- appear in cleartext in the network traffic, so it might be undesirable
- in some cases.
+ not just any SSL proxy.) However, <acronym>SNI</acronym> makes the
+ destination host name appear in cleartext in the network traffic, so
+ it might be undesirable in some cases.
</para>
</listitem>
</varlistentry>
@@ -8430,7 +8429,7 @@ ldap://ldap.acme.com/cn=dbserver,cn=hosts?pgconnectinfo?base?(objectclass=*)
</varlistentry>
<varlistentry>
- <term>Man
in the middle (<acronym>MITM</acronym>)</term>
+ <term>Man
-in-the-middle (<acronym>MITM</acronym>)</term>
<listitem>
<para>If a third party can modify the data while passing between the
client and server, it can pretend to be the server and therefore see and