Re: security

From: "Karl O(dot) Pinc" <kop(at)meme(dot)com>
To: Ron Peterson <rpeterso(at)mtholyoke(dot)edu>
Cc: pgsql-general(at)postgresql(dot)org
Subject: Re: security
Date: 2005-02-06 04:30:49
Message-ID: 1107664249l.23980l.3l@mofo
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general


On 02/05/2005 08:08:00 PM, Ron Peterson wrote:
> I would like to be able to assert that the security of data stored as
> a
> value in a PostgreSQL table can be as high as the security of saving
> that same piece of data to a file on disk. Would that be correct?

Well, from a theoretical perspective you're adding additional levels
of complexity when you use PostgreSQL. The postgres databases are
in the filesystem, so you don't eliminate complexity there, and
you've added the complexity of a database and a network into the
mix. With more complexity there's more to go wrong. I guess the
question is whether the additional complexity buys you additional
security that makes up the difference.

I'd say the answer depends on how badly you need the additional
security.

Otherwise, Idunno.

Karl <kop(at)meme(dot)com>
Free Software: "You don't pay back, you pay forward."
-- Robert A. Heinlein

In response to

  • security at 2005-02-06 02:08:00 from Ron Peterson

Browse pgsql-general by date

  From Date Subject
Next Message John DeSoi 2005-02-06 04:57:45 Re: Referencing uninitialized variables in plpgsql
Previous Message Karl O. Pinc 2005-02-06 04:20:51 Referencing uninitialized variables in plpgsql