Re: [HACKERS] WIP: Data at rest encryption - Mailing list pgsql-hackers

From Peter Eisentraut
Subject Re: [HACKERS] WIP: Data at rest encryption
Date
Msg-id babf2042-3a7f-1601-7767-b34707194462@2ndquadrant.com
Whole thread Raw
In response to Re: [HACKERS] WIP: Data at rest encryption  (Ants Aasma <ants.aasma@eesti.ee>)
Responses Re: [HACKERS] WIP: Data at rest encryption  (Aleksander Alekseev <a.alekseev@postgrespro.ru>)
List pgsql-hackers
On 6/12/17 17:11, Ants Aasma wrote:
> I'm curious if the community thinks this is a feature worth having?
> Even considering that security experts would classify this kind of
> encryption as a checkbox feature.

File system encryption already exists and is well-tested.  I don't see
any big advantages in re-implementing all of this one level up.  You
would have to touch every single place in PostgreSQL backend and tool
code where a file is being read or written.  Yikes.

-- 
Peter Eisentraut              http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services



pgsql-hackers by date:

Previous
From: Shubham Barai
Date:
Subject: [HACKERS] GSoC 2017 weekly progress reports (week 2)
Next
From: Peter Eisentraut
Date:
Subject: Re: [HACKERS] ICU support on Windows