Re: security - Mailing list pgsql-general

From Karl O. Pinc
Subject Re: security
Date
Msg-id 1107664249l.23980l.3l@mofo
Whole thread Raw
In response to security  (Ron Peterson <rpeterso@mtholyoke.edu>)
List pgsql-general
On 02/05/2005 08:08:00 PM, Ron Peterson wrote:
> I would like to be able to assert that the security of data stored as
> a
> value in a PostgreSQL table can be as high as the security of saving
> that same piece of data to a file on disk.  Would that be correct?

Well, from a theoretical perspective you're adding additional levels
of complexity when you use PostgreSQL.  The postgres databases are
in the filesystem, so you don't eliminate complexity there, and
you've added the complexity of a database and a network into the
mix.  With more complexity there's more to go wrong.  I guess the
question is whether the additional complexity buys you additional
security that makes up the difference.

I'd say the answer depends on how badly you need the additional
security.

Otherwise, Idunno.

Karl <kop@meme.com>
Free Software:  "You don't pay back, you pay forward."
                 -- Robert A. Heinlein



pgsql-general by date:

Previous
From: "Karl O. Pinc"
Date:
Subject: Referencing uninitialized variables in plpgsql
Next
From: John DeSoi
Date:
Subject: Re: Referencing uninitialized variables in plpgsql