Re: [GENERAL] Transparent encryption in PostgreSQL?

2005-07-15 Thread Greg Patnude
The point of a data base is storing ASCII or unicode not encypting the data... encrypting the data IN the database is a bad idea what happens if you ever lose the key ??? you lose ALL your data... Additionally -- encryption keys are usually machine-dependent so you lose the ability to

Re: [GENERAL] Transparent encryption in PostgreSQL?

2005-07-15 Thread Chris Browne
[EMAIL PROTECTED] (Matt McNeil) writes: Greetings,I need to securely store lots of sensitive contact information andnotes in a freely available database (eg PostgreSQL or MySQL) that will bestored on a database server which I do not have direct access to. This database will be accessed by a

Re: [GENERAL] Transparent encryption in PostgreSQL?

2005-07-14 Thread Joachim Wieland
On Wed, Jul 13, 2005 at 11:18:04PM -0500, Bob wrote: Here is the link in case your fingers are broken and it hurts to type;) http://www.postgresql.org/docs/8.0/interactive/encryption-options.html I think the Password Storage Encryption paragraph needs a note similar to what Stephen Frost wrote

[GENERAL] Transparent encryption in PostgreSQL?

2005-07-13 Thread Matt McNeil
Greetings, I need to securely store lots of sensitive contact information andnotes in a freely availabledatabase (eg PostgreSQL or MySQL) that will bestored on a database server which I do not have direct access to. This database will be accessed by a PHP application that I amdeveloping.

Re: [GENERAL] Transparent encryption in PostgreSQL?

2005-07-13 Thread Joshua D. Drake
My sense is that this is a difficult problem. However, I made the mistake of promising this functionality, Well it isn't that difficult except that you need some level of two way encryption and it is going to be a performance nightmare. I would suggest instead just mounting postgresql on

[GENERAL] Transparent encryption in PostgreSQL?

2005-07-13 Thread Matt McNeil
Greetings, I need to securely store lots of sensitive contact information andnotes in a freely availabledatabase (eg PostgreSQL or MySQL) that will bestored on a database server which I do not have direct access to. This database will be accessed by a PHP application that I amdeveloping.

Re: [GENERAL] Transparent encryption in PostgreSQL?

2005-07-13 Thread Bob
Doesn't that really only save you from having someone come in at the OS level and copying your data files and than moutning them on a differet server/database. A person could still come in to psql as a dba or anyone for that matter with the proper select grants and query off that data and see it

Re: [GENERAL] Transparent encryption in PostgreSQL?

2005-07-13 Thread snacktime
On 7/13/05, Matt McNeil [EMAIL PROTECTED] wrote: Greetings, I need to securely store lots of sensitive contact information and notes in a freely available database (eg PostgreSQL or MySQL) that will be stored on a database server which I do not have direct access to. This database will be

Re: [GENERAL] Transparent encryption in PostgreSQL?

2005-07-13 Thread Tom Lane
Bob [EMAIL PROTECTED] writes: Doesn't that really only save you from having someone come in at the OS level and copying your data files and than moutning them on a differet server/database. A person could still come in to psql as a dba or anyone for that matter with the proper select grants

Re: [GENERAL] Transparent encryption in PostgreSQL?

2005-07-13 Thread Bruce Momjian
Tom Lane wrote: Bob [EMAIL PROTECTED] writes: Doesn't that really only save you from having someone come in at the OS level and copying your data files and than moutning them on a differet server/database. A person could still come in to psql as a dba or anyone for that matter with

Re: [GENERAL] Transparent encryption in PostgreSQL?

2005-07-13 Thread Bob
Here is the link in case your fingers are broken and it hurts to type;) http://www.postgresql.org/docs/8.0/interactive/encryption-options.html On 7/13/05, Matt McNeil [EMAIL PROTECTED] wrote: Greetings, I need to securely store lots of sensitive contact information andnotes in a freely