On Wed, Sep 16, 2026 at 7:21 AM Tom Lane <[email protected]> wrote: > Daniel Gustafsson <[email protected]> writes: > > To be honest, I am absolutely terrified by any feature which does any level > > of > > work based on user input before authentication or authorization. > > Yeah. TBH, I can't see this ever getting committed.
I agree. Greg, I think any design that mixes HTTP and the Postgres protocol on the wire is probably doomed, because then we all get to be forever vigilant against cross-protocol attacks. I have many, many, more issues with the design as presented, but IMNSHO the core feature is a nonstarter, so it doesn't make much sense to get into those details. It seems to me that there's nothing wrong with running a separate service that provides that information, which can then be tailored to whatever security requirements (or not) are required. --Jacob
