TLDR Tech / Dev
Ctrl-C in psql gives me the heebie-jeebies
This article reveals a significant security flaw in how the `psql` command-line tool cancels PostgreSQL queries. When Ctrl-C is pressed, `psql` sends a `CancelRequest` over a new, unencrypted connection, even if the primary database connection is secured with TLS. This plaintext transmission poses a Denial-of-Service risk, as an attacker could intercept and replay these requests to cancel future queries on the same connection.
Read the full story