Re: PGP encrypt/decrypt - Prereqistes - Mailing list pgsql-general

From Alban Hertroys
Subject Re: PGP encrypt/decrypt - Prereqistes
Date
Msg-id 61B807C6-9E28-4061-A4F4-4CE5BEDDF6CD@solfertje.student.utwente.nl
Whole thread Raw
In response to Re: PGP encrypt/decrypt - Prereqistes  (Vikram A <vikkiatbipl@yahoo.in>)
List pgsql-general
On 14 Jun 2011, at 5:51, Vikram A wrote:

> Dear Mr. Craig Ringer,
> Thank you for your response.
> I would like to crypt certain sensitive information in my applications such as Student register number, their marks,
resultsetc. For this reason i done a study for doing encryption. Where I found that this PGP will help the
encryption/decryption.  
> Any other methods/techniques are there for encryption? I prefer encryption with "key"; key also should not be known
toDevelopers.  


I fail to see why you would need encryption for something like this.

If you can't trust your developers, then you're in trouble. Your developers surely signed a contract that prohibits
themfrom sharing confident information (and apparently it is, or you wouldn't bother trying to get it encrypted) with
otherpeople - they did, right? 

Your students shouldn't have access to your database server, so they can't read or manipulate that data.

If your developers do share such information with the "outside" world, they're looking at a court case with a hefty
fee.If your students break into your server, they committed a crime. 

So what exactly is the encryption supposed to solve? Do you really need it?

Alban Hertroys

--
Screwing up is an excellent way to attach something to the ceiling.


!DSPAM:737,4df7066c12091187585653!



pgsql-general by date:

Previous
From: Stefan Keller
Date:
Subject: No implicit index created when adding primary key with ALTER TABLE
Next
From: Alban Hertroys
Date:
Subject: Re: determine client os