What will it take to make it work for sslmode=require (no certificate verfication)

[sbansal6]

@apisarenco :- Any idea or updates if you are planning to implement SSL feature for this :)

[apisarenco]

This would have to be investigated, but SSL might be a big complication because traffic encryption/decryption would have to be re-implemented at the TCP level.

Instead, I find it more feasible, if possible, to just have a VM on the same subnet as postgresql server, and have traffic unencrypted between them, while the client apps would connect to that VM using SSH, create a tunnel, and thus ensuring traffic encryption.

Or just use a VPN