| From: | laurent(dot)feron(at)free(dot)fr |
|---|---|
| To: | pgsql-hackers(at)lists(dot)postgresql(dot)org |
| Subject: | TDE (Transparent Data Encryption) supported ? |
| Date: | 2020-09-11 08:41:15 |
| Message-ID: | 751159936.59394498.1599813675559.JavaMail.root@spooler3-g27.priv.proxad.net |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-hackers |
Hello
Just arrived in the PostgreSQL world, and I'm looking for a solution to encrypt the database by using a TDE feature. Apparently this feature does not exist. Is it expected in the roadmap?
There is a fork named PostgreSQL 12.x TDE from Cybertec. The issue is that there is no key management at all.
Using pgcrypto has an impact on the application then I have to give up this way.
There is another alternative named "Client-Side Encryption'' that I have not looked at in detail yet. I'm afraid that this solution has an impact on the application too. And if there are two applications pointing to the same database I am wondering how the encryption key is shared between the two nodes.
The last point is about the backups, whatever the solution, the data has to be in an encrypted format when "backuping".
Any suggestions are welcome :). Thanks
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Wang, Shenhao | 2020-09-11 08:42:13 | copyright problem in REL_13_STABLE |
| Previous Message | Kyotaro Horiguchi | 2020-09-11 08:36:19 | Re: Implement UNLOGGED clause for COPY FROM |