Re: Submission of Feature Request : RFC- for Implementing Transparent Data Encryption in Postgres
- From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
- To: sanjay sharma <sanksh(at)hotmail(dot)com>
- Cc: pgsql-hackers(at)postgresql(dot)org
- Subject: Re: Submission of Feature Request : RFC- for Implementing Transparent Data Encryption in Postgres
- Date: Sun, 30 Mar 2008 16:36:13 -0400
- Message-id: <28301.1206909373@sss.pgh.pa.us> <text/plain>
sanjay sharma <sanksh(at)hotmail(dot)com> writes:
> 1. Transparent Data Encryption: The column which needs to be stored in encrypted form can be specified through DDL. The encryption key can be stored in a secure file accessible through a pass phrase. That particular column would apper in encrypted form for all users except the users specified through a grant to see the data in decrypted form.
Exactly what threat do you see this protecting against, that wouldn't be
better solved by SQL-standard features like column-level access
permissions?
regards, tom lane
Home |
Main Index |
Thread Index