This talk explores client authentication in PostgreSQL, ranging from "trust" to SSL certificates and enterprise authentication systems like GSSAPI (Kerberos). We will discuss security and compliance implications, but also the performance impact and operational aspects as password changes. The presentation also includes typical usage scenarios and practical configuration advice.