Re: RFE: Transparent encryption on all fields - Mailing list pgsql-hackers

From Sam Halliday
Subject Re: RFE: Transparent encryption on all fields
Date
Msg-id 2A7F073A-6FF8-4639-86A2-7FF91B49CC7E@gmail.com
Whole thread Raw
In response to Re: RFE: Transparent encryption on all fields  (Gurjeet Singh <singh.gurjeet@gmail.com>)
Responses Re: RFE: Transparent encryption on all fields  (Sam Mason <sam@samason.me.uk>)
List pgsql-hackers
Not looking for a Windows solution. Must be cross platform and work  
for headless machines, laptops and desktops. Encrypted drive solutions  
fall short of these requirements. Other considerations which rule out  
encrypted drives have been discussed earlier in the thread.

For the record, I have a working solution at the moment that involves  
using an encrypted drive and a manual per-user startup sequence. *I am  
not looking for user advice*, this is an RFE for an additional server- 
side encryption approach to security.

-- 
Sam

On 27 Apr 2009, at 01:54, Gurjeet Singh wrote:

> On Mon, Apr 27, 2009 at 3:43 AM, Sam Halliday  
> <sam.halliday@gmail.com> wrote:
>
> TrueCrypt is exactly the "encrypted drive" solution. It has  
> problems. They
> are described in this thread.
>
> If there were a way to prompt the user for the password to an  
> encrypted drive on startup for all OS, with an equivalent for  
> headless machines... then perhaps encrypted drives would be  
> practical enough to be used by psql
>
> Perhaps TrueCrypt _is_ the solution you are looking for. It allows  
> you to encrypt the root/system partition (at least on Windows) and  
> can ask for decryption password at boot time.
>
> http://www.truecrypt.org/docs/?s=system-encryption
>
> Best regards,
> -- 
> gurjeet[.singh]@EnterpriseDB.com
> singh.gurjeet@{ gmail | hotmail | indiatimes | yahoo }.com
>
> EnterpriseDB      http://www.enterprisedb.com
>
> Mail sent from my BlackLaptop device



pgsql-hackers by date:

Previous
From: hernan gonzalez
Date:
Subject: bug #4662 (mingw) in 8.4 beta1
Next
From: Sam Halliday
Date:
Subject: Re: RFE: Transparent encryption on all fields