Re: RFE: Transparent encryption on all fields - Mailing list pgsql-hackers

From Sam Halliday
Subject Re: RFE: Transparent encryption on all fields
Date
Msg-id A2665B8C-4195-448E-B42F-DE2E42A2AF1C@gmail.com
Whole thread Raw
In response to Re: RFE: Transparent encryption on all fields  (Sam Mason <sam@samason.me.uk>)
List pgsql-hackers
On 27 Apr 2009, at 13:55, Sam Mason wrote:
> Allowing multiple users/encryption keys access the same database seems
> problematic; how would you allow catalogue access and enforce unique  
> or
> other constraints if the server couldn't look to see what's there.   
> Not
> sure what you're after here though.

Any valid key should have full access (i.e. this isn't about access  
control). As a first approximation, a single key would do the trick.  
As a more rigorous solution, there are ways to encrypt data allowing  
multiple keys to decrypt.


pgsql-hackers by date:

Previous
From: Fujii Masao
Date:
Subject: Re: Synchronous replication: psqlODBC driver compilation
Next
From: Tom Lane
Date:
Subject: Re: To know what a macro does