Re: Transparent encryption in PostgreSQL? - Mailing list pgsql-general

From Bruce Momjian
Subject Re: Transparent encryption in PostgreSQL?
Date
Msg-id 200507140005.j6E05H317532@candle.pha.pa.us
Whole thread Raw
In response to Re: Transparent encryption in PostgreSQL?  (Tom Lane <tgl@sss.pgh.pa.us>)
List pgsql-general
Tom Lane wrote:
> Bob <luckyratfoot@gmail.com> writes:
> > Doesn't that really only save you from having someone come in at the OS
> > level and copying your data files and than moutning them on a differet
> > server/database. A person could still come in to psql as a dba or anyone for
> > that matter with the proper select grants and query off that data and see it
> > in encrypted.
>
> Yeah, the real question here is what threats are you trying to defend
> against.  "I need an encrypted database" is pretty nearly a meaningless
> statement --- first tell us who the attacker is that you're worried about.

We have an encryption section in the documentation now --- please see
that.

--
  Bruce Momjian                        |  http://candle.pha.pa.us
  pgman@candle.pha.pa.us               |  (610) 359-1001
  +  If your life is a hard drive,     |  13 Roberts Road
  +  Christ can be your backup.        |  Newtown Square, Pennsylvania 19073

pgsql-general by date:

Previous
From: Bruce Momjian
Date:
Subject: Re: Converting MySQL tinyint to PostgreSQL
Next
From: David Mitchell
Date:
Subject: Stopping Postgres