Re: Encryption with customer provided key in a multi tenant Postgres JSONB DB - Mailing list pgsql-general

From Bruce Momjian
Subject Re: Encryption with customer provided key in a multi tenant Postgres JSONB DB
Date
Msg-id 20201112173955.GA25594@momjian.us
Whole thread Raw
In response to Re: Encryption with customer provided key in a multi tenant Postgres JSONB DB  (Saurav Sarkar <saurav.sarkar1@gmail.com>)
List pgsql-general
On Thu, Nov 12, 2020 at 11:57:27AM +0530, Saurav Sarkar wrote:
> Hi David,
> 
> Thanks for the reply.
> 
> I just wanted to check if there is any possibility or any activity ongoing
> which can enable database or fine granular level encryption in future.
> 
> Probably then i can wait otherwise i have to move towards Client Side
> encryption as you mentioned.

Postgres shared the same WAL files for all databases in a cluster, so
the idea of having multiple keys for different users is very hard or
impossible to implement.  Client-side is much better for this use-case.

-- 
  Bruce Momjian  <bruce@momjian.us>        https://momjian.us
  EnterpriseDB                             https://enterprisedb.com

  The usefulness of a cup is in its emptiness, Bruce Lee




pgsql-general by date:

Previous
From: Michael Lewis
Date:
Subject: Re: Is it possible to write a generic UPSERT?
Next
From: Andreas Kretschmer
Date:
Subject: Re: Is it possible to write a generic UPSERT?