Re: How to secure PostgreSQL Data for distribute? - Mailing list pgsql-general

From Nikola Milutinovic
Subject Re: How to secure PostgreSQL Data for distribute?
Date
Msg-id 43042367.7000308@ev.co.yu
Whole thread Raw
In response to How to secure PostgreSQL Data for distribute?  ("Premsun Choltanwanich" <Premsun@nsasia.co.th>)
List pgsql-general
Premsun Choltanwanich wrote:

> Dear All,
>
>      I need to distribute my application that use PostgreSQL as
> database to my customer. But I still have some questions in my mind on
> database security. I understand that everybody  who get my application
> database will be have a full control permission on my database in case
> that PostgreSQL already installed on their computer and they are an
> administrator on PostgreSQL. So that mean data, structure and any
> ideas contain in database will does not secure on this point. Is my
> understanding correct?
>
>      What is the good way to make it all secure? Please advise.


If you want to keep your data/schema "secure", you have to keep it at
your own place and that is just the first step in making it "secure".
Espionage, and that is what basically bothers you, is a complex field of
enterprize and there is no "one size fits them all".

Your first step is keeping the DB at your site and letting your
customers connect to it. This may present a huge problem, but there is
no other way. No encryption would work, trust me.

Nix.

pgsql-general by date:

Previous
From: Joseph Shraibman
Date:
Subject: Re: [JDBC] pg_locks.transaction field type
Next
From: WireSpot
Date:
Subject: Weird performance hit