Document that Kerberos is for authentication, and does not encrypt data

or queries over the network.

diff --git a/doc/src/sgml/client-auth.sgml b/doc/src/sgml/client-auth.sgml
index f418332a395f2e69fe64380c003a6b5ba8fb7873..4b7c2c4709343bebe60651ddbd4898d57ad35c85 100644 (file)
--- a/doc/src/sgml/client-auth.sgml
+++ b/doc/src/sgml/client-auth.sgml
@@ -1,4 +1,4 @@
-
+
 
 
  Client Authentication
@@ -653,6 +653,9 @@ local   db1,db2,@demodbs  all                         md5
     MIT Kerberos page
     can be good starting points for exploration.
     Several sources for Kerberos distributions exist.
+    Kerberos provides secure authentication but
+    does not encrypt queries or data passed over the network;  for that
+    use SSL.