In article <3D6E088D(dot)5050902(at)mega-bucks(dot)co(dot)jp>,
jc(at)mega-bucks(dot)co(dot)jp (Jean-Christian Imbeault) wrote:
> I've scoured the web and can't seem to find any definitive on how to
> secure sensitive information in a DB, postgresQL in particular.
> Most suggestions rely upon encrypting the data. This is all fine and
> well except for the one nagging question I keep having: how do you
> protect the password that is needed to decrypt the data? Maybe I'm
> missing something?
> Can anyone recommend any good web documents on how to secure sensitive
Peter Wayner has just written a book entitled "Translucent Databases"
that covers this subject. I have ordered my copy through Amazon and am
anxiously awaiting its arrival sometime this week.
Here is a link to Wayner's site about the book:
Here is a review at O'Reilly (the review's author uses the
Yale/Princeton hacking episode to illustrate how the techniques in the
book would have stopped this from happening):
In response to
pgsql-general by date
|Next:||From: Bruce Momjian||Date: 2002-08-29 18:33:54|
|Subject: Re: [GENERAL] worried about PGPASSWORD drop|
|Previous:||From: Robert Treat||Date: 2002-08-29 18:11:42|
|Subject: Re: [Pgreplication-general] Master/Slave is in town!|