Re: [QGIS-Developer] SSL Performance Overhead

2019-06-19 Thread Jonathan Moules
n...@lists.osgeo.org] Im Auftrag von Bernhard Ströbl Gesendet: Montag, 17. Juni 2019 15:31 An: qgis-developer@lists.osgeo.org Betreff: Re: [QGIS-Developer] SSL Performance Overhead Hi all, I have to add that we use SSL to encrypt the user credentials as we use LDAP to authentificate users at th

Re: [QGIS-Developer] SSL Performance Overhead

2019-06-18 Thread Bo Victor Thomsen
: Montag, 17. Juni 2019 15:31 An: qgis-developer@lists.osgeo.org Betreff: Re: [QGIS-Developer] SSL Performance Overhead Hi all, I have to add that we use SSL to encrypt the user credentials as we use LDAP to authentificate users at the database. So SSL is not only relevant looking at data stored in

Re: [QGIS-Developer] SSL Performance Overhead

2019-06-18 Thread Stefan Steiger
Nachricht- Von: QGIS-Developer [mailto:qgis-developer-boun...@lists.osgeo.org] Im Auftrag von Bernhard Ströbl Gesendet: Montag, 17. Juni 2019 15:31 An: qgis-developer@lists.osgeo.org Betreff: Re: [QGIS-Developer] SSL Performance Overhead Hi all, I have to add that we use SSL to encrypt the

Re: [QGIS-Developer] SSL Performance Overhead

2019-06-17 Thread Bernhard Ströbl
*Von:*QGIS-Developer [mailto:qgis-developer-boun...@lists.osgeo.org] *Im Auftrag von *Andreas Neumann *Gesendet:* Montag, 17. Juni 2019 09:05 *An:* Matthias Kuhn *Cc:* qgis-developer@lists.osgeo.org *Betreff:* Re: [QGIS-Developer] SSL Performance Overhead Hi, I would say, that the use of SSL

Re: [QGIS-Developer] SSL Performance Overhead

2019-06-17 Thread Andreas Neumann
Kuhn CC: qgis-developer@lists.osgeo.org BETREFF: Re: [QGIS-Developer] SSL Performance Overhead Hi, I would say, that the use of SSL should be encouraged if the connection goes through public networks. If the Postgis connection is within the company LAN I don't see a strong reason for ena

Re: [QGIS-Developer] SSL Performance Overhead

2019-06-17 Thread Stefan Steiger
-Developer [mailto:qgis-developer-boun...@lists.osgeo.org] Im Auftrag von Andreas Neumann Gesendet: Montag, 17. Juni 2019 09:05 An: Matthias Kuhn Cc: qgis-developer@lists.osgeo.org Betreff: Re: [QGIS-Developer] SSL Performance Overhead Hi, I would say, that the use of SSL should be encouraged if the

Re: [QGIS-Developer] SSL Performance Overhead

2019-06-17 Thread Andrea Aime
On Mon, Jun 17, 2019 at 1:03 PM Andrea Aime wrote: > Hey all, > sorry to intrude, but I have a bit of related information. > GeoServer uses the same underlying stack as QGIS > Sorry not as QGIS, same as UDig! Cheers Andrea == GeoServer Professional Services from the experts! Visit http://goo.

Re: [QGIS-Developer] SSL Performance Overhead

2019-06-17 Thread Andrea Aime
Hey all, sorry to intrude, but I have a bit of related information. GeoServer uses the same underlying stack as QGIS, at one point we noticed that the reading performance went down, upon investigation it turned out the JDBC driver started using SSL by default when available. So we added a flag to

Re: [QGIS-Developer] SSL Performance Overhead

2019-06-17 Thread Matthias Kuhn
On 6/17/19 12:16 PM, Martin Dobias wrote: On Mon, Jun 17, 2019 at 12:11 PM Matthias Kuhn wrote: Wouldn't connection pooling be such a change. That certainly was introduced after. Pooling was introduced to deal with multi-threaded rendering and should not affect that. There always was a connect

Re: [QGIS-Developer] SSL Performance Overhead

2019-06-17 Thread Martin Dobias
On Mon, Jun 17, 2019 at 12:11 PM Matthias Kuhn wrote: > > Wouldn't connection pooling be such a change. That certainly was > introduced after. Pooling was introduced to deal with multi-threaded rendering and should not affect that. There always was a connection that was kept alive while layer(s)

Re: [QGIS-Developer] SSL Performance Overhead

2019-06-17 Thread Matthias Kuhn
Wouldn't connection pooling be such a change. That certainly was introduced after. ___ QGIS-Developer mailing list QGIS-Developer@lists.osgeo.org List info: https://lists.osgeo.org/mailman/listinfo/qgis-developer Unsubscribe: https://lists.osgeo.org/ma

Re: [QGIS-Developer] SSL Performance Overhead

2019-06-17 Thread Mathieu Pellerin
For the record, sending unencrypted data over a local network isn't safe as soon as WIFI is part of said local network. On Mon, Jun 17, 2019, 17:02 Martin Dobias wrote: > Hi Matthias > > On Mon, Jun 17, 2019 at 8:48 AM Matthias Kuhn wrote: > > > > The documentation currently promises "massive s

Re: [QGIS-Developer] SSL Performance Overhead

2019-06-17 Thread Martin Dobias
Hi Matthias On Mon, Jun 17, 2019 at 8:48 AM Matthias Kuhn wrote: > > The documentation currently promises "massive speed-ups in PostGIS layer > rendering" with SSL disabled. [1] > > [...] > > Is there anyone who knows why this sentence was introduced? And if there > is (still) an issue with perfo

Re: [QGIS-Developer] SSL Performance Overhead

2019-06-17 Thread Andreas Neumann
Hi, I would say, that the use of SSL should be encouraged if the connection goes through public networks. If the Postgis connection is within the company LAN I don't see a strong reason for enabling SSL, unless the company LAN is designed in an "unsafe" way, or if sensitive data must be hidden f

[QGIS-Developer] SSL Performance Overhead

2019-06-16 Thread Matthias Kuhn
Hi, The documentation currently promises "massive speed-ups in PostGIS layer rendering" with SSL disabled. [1] I find some references to performance cost of SSL but they should be compensated for with connection pooling which we use for quite some time already. Recently, the web is more an