Re: RFE: Transparent encryption on all fields

From: Sam Halliday <sam(dot)halliday(at)gmail(dot)com>
To: pgsql-hackers(at)postgresql(dot)org
Subject: Re: RFE: Transparent encryption on all fields
Date: 2009-04-27 08:24:55
Message-ID: 2A7F073A-6FF8-4639-86A2-7FF91B49CC7E@gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

Not looking for a Windows solution. Must be cross platform and work
for headless machines, laptops and desktops. Encrypted drive solutions
fall short of these requirements. Other considerations which rule out
encrypted drives have been discussed earlier in the thread.

For the record, I have a working solution at the moment that involves
using an encrypted drive and a manual per-user startup sequence. *I am
not looking for user advice*, this is an RFE for an additional server-
side encryption approach to security.

--
Sam

On 27 Apr 2009, at 01:54, Gurjeet Singh wrote:

> On Mon, Apr 27, 2009 at 3:43 AM, Sam Halliday
> <sam(dot)halliday(at)gmail(dot)com> wrote:
>
> TrueCrypt is exactly the "encrypted drive" solution. It has
> problems. They
> are described in this thread.
>
> If there were a way to prompt the user for the password to an
> encrypted drive on startup for all OS, with an equivalent for
> headless machines... then perhaps encrypted drives would be
> practical enough to be used by psql
>
> Perhaps TrueCrypt _is_ the solution you are looking for. It allows
> you to encrypt the root/system partition (at least on Windows) and
> can ask for decryption password at boot time.
>
> http://www.truecrypt.org/docs/?s=system-encryption
>
> Best regards,
> --
> gurjeet[(dot)singh](at)EnterpriseDB(dot)com
> singh(dot)gurjeet(at){ gmail | hotmail | indiatimes | yahoo }.com
>
> EnterpriseDB http://www.enterprisedb.com
>
> Mail sent from my BlackLaptop device

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Sam Halliday 2009-04-27 08:28:45 Re: RFE: Transparent encryption on all fields
Previous Message tomas 2009-04-27 06:58:33 Re: RFE: Transparent encryption on all fields