| From: | Bruce Momjian <bruce(at)momjian(dot)us> |
|---|---|
| To: | Saurav Sarkar <saurav(dot)sarkar1(at)gmail(dot)com> |
| Cc: | "David G(dot) Johnston" <david(dot)g(dot)johnston(at)gmail(dot)com>, PostgreSQL General <pgsql-general(at)lists(dot)postgresql(dot)org> |
| Subject: | Re: Encryption with customer provided key in a multi tenant Postgres JSONB DB |
| Date: | 2020-11-12 17:39:55 |
| Message-ID: | 20201112173955.GA25594@momjian.us |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-general |
On Thu, Nov 12, 2020 at 11:57:27AM +0530, Saurav Sarkar wrote:
> Hi David,
>
> Thanks for the reply.
>
> I just wanted to check if there is any possibility or any activity ongoing
> which can enable database or fine granular level encryption in future.
>
> Probably then i can wait otherwise i have to move towards Client Side
> encryption as you mentioned.
Postgres shared the same WAL files for all databases in a cluster, so
the idea of having multiple keys for different users is very hard or
impossible to implement. Client-side is much better for this use-case.
--
Bruce Momjian <bruce(at)momjian(dot)us> https://momjian.us
EnterpriseDB https://enterprisedb.com
The usefulness of a cup is in its emptiness, Bruce Lee
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Andreas Kretschmer | 2020-11-12 19:23:06 | Re: Is it possible to write a generic UPSERT? |
| Previous Message | Michael Lewis | 2020-11-12 17:34:58 | Re: Is it possible to write a generic UPSERT? |