My thoughts on Ctrl + C in psql gives me the heebi-jeebies: Ctrl + C in psql gives me the heebi-jeebies

Commentary

  • Ctrl + C in psql gives me the heebi-jeebies
  • This is really interesting. I like the way he calls it heebi-jeebies. It really is.
  • Like the TLS is not there for the cancel request, so your psql connection sends the unencrypted database secret in the wild, and somehow if intercepted by anyone in the same network, it can launch a Denial of Service attack.
  • The Neon Proxy and Elephant shark(the wireshark but for Postgres) have a workaround by noting the secret with the initial connection and when the psql sends it with the plain text the secret it intercepts it and kills the right session. Wired stuff but kind of no choice, that would require a bit of a refactor on the protocol.