5 ms·
Postgres also supports auth via SSL client certs, so that's perhaps another option. I don't know how well that maps to apis in Cloudflare and the server side o
by tyingq 4y ago
Postgres also supports auth via SSL client certs, so that's perhaps another option. I don't know how well that maps to apis in Cloudflare and the server side of Neon.
- carlsverre 4y agoThis is a good idea... how much compute does SSL client cert auth require on the client side? I would suppose it has to produce a signature of some kind, perhaps signing a challenge from the server?
- deleted 4y ago[deleted]
- e12e 4y agoClient signs previous handshake messages with private key to prove it has possession of private key for client certificate. It should be a lot faster than a purposefully slow kdf AFAIK.