Re: Submission of Feature Request : RFC- for Implementing Transparent Data Encryption in Postgres - Mailing list pgsql-hackers

From Tom Lane
Subject Re: Submission of Feature Request : RFC- for Implementing Transparent Data Encryption in Postgres
Date
Msg-id 28301.1206909373@sss.pgh.pa.us
Whole thread Raw
In response to Submission of Feature Request : RFC- for Implementing Transparent Data Encryption in Postgres  (sanjay sharma <sanksh@hotmail.com>)
Responses Re: Submission of Feature Request : RFC- for Implementing Transparent Data Encryption in Postgres
List pgsql-hackers
sanjay sharma <sanksh@hotmail.com> writes:
> 1. Transparent Data Encryption: The column which needs to be stored in encrypted form can be specified through DDL.
Theencryption key can be stored in a  secure file accessible through a pass phrase. That particular column would apper
inencrypted form for all users except the users specified through a grant to see the data in decrypted form.
 

Exactly what threat do you see this protecting against, that wouldn't be
better solved by SQL-standard features like column-level access
permissions?
        regards, tom lane


pgsql-hackers by date:

Previous
From: David Fetter
Date:
Subject: Re: Cast as compound type
Next
From: Tom Lane
Date:
Subject: Re: Patch : Global Prepared Statements