From: | Sam Halliday <sam(dot)halliday(at)gmail(dot)com> |
---|---|
To: | pgsql-hackers(at)postgresql(dot)org |
Subject: | Re: RFE: Transparent encryption on all fields |
Date: | 2009-04-27 08:24:55 |
Message-ID: | 2A7F073A-6FF8-4639-86A2-7FF91B49CC7E@gmail.com |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-hackers |
Not looking for a Windows solution. Must be cross platform and work
for headless machines, laptops and desktops. Encrypted drive solutions
fall short of these requirements. Other considerations which rule out
encrypted drives have been discussed earlier in the thread.
For the record, I have a working solution at the moment that involves
using an encrypted drive and a manual per-user startup sequence. *I am
not looking for user advice*, this is an RFE for an additional server-
side encryption approach to security.
--
Sam
On 27 Apr 2009, at 01:54, Gurjeet Singh wrote:
> On Mon, Apr 27, 2009 at 3:43 AM, Sam Halliday
> <sam(dot)halliday(at)gmail(dot)com> wrote:
>
> TrueCrypt is exactly the "encrypted drive" solution. It has
> problems. They
> are described in this thread.
>
> If there were a way to prompt the user for the password to an
> encrypted drive on startup for all OS, with an equivalent for
> headless machines... then perhaps encrypted drives would be
> practical enough to be used by psql
>
> Perhaps TrueCrypt _is_ the solution you are looking for. It allows
> you to encrypt the root/system partition (at least on Windows) and
> can ask for decryption password at boot time.
>
> http://www.truecrypt.org/docs/?s=system-encryption
>
> Best regards,
> --
> gurjeet[(dot)singh](at)EnterpriseDB(dot)com
> singh(dot)gurjeet(at){ gmail | hotmail | indiatimes | yahoo }.com
>
> EnterpriseDB http://www.enterprisedb.com
>
> Mail sent from my BlackLaptop device
From | Date | Subject | |
---|---|---|---|
Next Message | Sam Halliday | 2009-04-27 08:28:45 | Re: RFE: Transparent encryption on all fields |
Previous Message | tomas | 2009-04-27 06:58:33 | Re: RFE: Transparent encryption on all fields |