ChannelBinding

How hard the driver insists on binding the SCRAM exchange to the TLS channel underneath it.

Channel binding stops an intermediary from relaying an authentication exchange it cannot compute a proof for: the client proof covers a hash of the certificate the server presented, so a proxy that terminates TLS with a certificate of its own produces a proof the real server rejects. It earns its keep under sslmode=require, where the connection is encrypted but nothing checks who is on the other end of it.

Entries

Link copied to clipboard

Never offer channel binding; the exchange declares no support for it.

Link copied to clipboard

Bind when the connection is encrypted and the server offers it, carry on when not. Default.

Link copied to clipboard

Refuse to authenticate at all unless the exchange is bound to the TLS channel.

Types

Link copied to clipboard
object Companion

Properties

Link copied to clipboard

Returns a representation of an immutable list of all enum entries, in the order they're declared.

Link copied to clipboard
Link copied to clipboard
Link copied to clipboard

Functions

Link copied to clipboard

Returns the enum constant of this type with the specified name. The string must match exactly an identifier used to declare an enum constant in this type. (Extraneous whitespace characters are not permitted.)

Link copied to clipboard

Returns an array containing the constants of this enum type, in the order they're declared.