From: Bruce Momjian <bruce@momjian.us>
Date: Thu, 23 Nov 2006 05:39:17 +0000 (+0000)
Subject: Document that Kerberos is for authentication, and does not encrypt data
X-Git-Tag: REL8_2_RC1~19
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=ebf071643a0346474de269d013941a8a098fe8b7;p=postgresql

Document that Kerberos is for authentication, and does not encrypt data
or queries over the network.
---

diff --git a/doc/src/sgml/client-auth.sgml b/doc/src/sgml/client-auth.sgml
index f418332a39..4b7c2c4709 100644
--- a/doc/src/sgml/client-auth.sgml
+++ b/doc/src/sgml/client-auth.sgml
@@ -1,4 +1,4 @@
-<!-- $PostgreSQL: pgsql/doc/src/sgml/client-auth.sgml,v 1.95 2006/11/17 23:25:17 tgl Exp $ -->
+<!-- $PostgreSQL: pgsql/doc/src/sgml/client-auth.sgml,v 1.96 2006/11/23 05:39:17 momjian Exp $ -->
 
 <chapter id="client-authentication">
  <title>Client Authentication</title>
@@ -653,6 +653,9 @@ local   db1,db2,@demodbs  all                         md5
     <ulink url="http://web.mit.edu/kerberos/www/">MIT Kerberos page</ulink>
     can be good starting points for exploration.
     Several sources for <productname>Kerberos</> distributions exist.
+    <productname>Kerberos</productname> provides secure authentication but
+    does not encrypt queries or data passed over the network;  for that
+    use <acronym>SSL</acronym>.
    </para>
 
    <para>