Re: Submission of Feature Request : RFC- for Implementing Transparent Data Encryption in Postgres - Mailing list pgsql-hackers

From Jonah H. Harris
Subject Re: Submission of Feature Request : RFC- for Implementing Transparent Data Encryption in Postgres
Date
Msg-id 36e682920803301610p57ced46dhde6bd22546c6a023@mail.gmail.com
Whole thread Raw
In response to Submission of Feature Request : RFC- for Implementing Transparent Data Encryption in Postgres  (sanjay sharma <sanksh@hotmail.com>)
Responses Re: Submission of Feature Request : RFC- for Implementing Transparent Data Encryption in P
List pgsql-hackers
On Sun, Mar 30, 2008 at 2:52 PM, sanjay sharma <sanksh@hotmail.com> wrote:
>  1. Transparent Data Encryption: The column which needs to be stored in
> encrypted form can be specified through DDL.

Hey Sanjay.  Based on your wording, you've probably used Oracle's TDE
and want to implement it in PG.  Unfortunately, nine times out of ten,
cool Oracle features aren't seen as cool in this crowd.  Looking at
your responses, there's an obvious misunderstanding in regard to
security (column-level access != encryption), and of performance
(encrypt the whole thing and pay a heavy price on *all* accesses
instead of only granular accesses to only the column(s) you're
encrypting).

Regardless, if you want to get a feature into PG, you need to first
come up with a good reason for it, get people behind the idea, and
then come up with a plan to implement it.

-- 
Jonah H. Harris, Sr. Software Architect | phone: 732.331.1324
EnterpriseDB Corporation | fax: 732.331.1301
499 Thornall Street, 2nd Floor | jonah.harris@enterprisedb.com
Edison, NJ 08837 | http://www.enterprisedb.com/


pgsql-hackers by date:

Previous
From: "Douglas McNaught"
Date:
Subject: Re: Submission of Feature Request : RFC- for Implementing Transparent Data Encryption in Postgres
Next
From: sanjay sharma
Date:
Subject: Re: Submission of Feature Request : RFC- for Implementing Transparent Data Encryption in P