Re: Enquiry about TDE with PgSQL

From: Christophe Pettus <xof(at)thebuild(dot)com>
To: Adrian Klaver <adrian(dot)klaver(at)aklaver(dot)com>
Cc: Bruce Momjian <bruce(at)momjian(dot)us>, Kai Wagner <kai(dot)wagner(at)percona(dot)com>, Laurenz Albe <laurenz(dot)albe(at)cybertec(dot)at>, Ron Johnson <ronljohnsonjr(at)gmail(dot)com>, pgsql-general <pgsql-general(at)postgresql(dot)org>
Subject: Re: Enquiry about TDE with PgSQL
Date: 2025-10-31 17:04:35
Message-ID: E94D3E44-8BF5-45F8-9497-3918A8488706@thebuild.com
Views: Whole Thread | Raw Message | Download mbox | Resend email
Thread:
Lists: pgsql-general

> On Oct 31, 2025, at 08:21, Adrian Klaver <adrian(dot)klaver(at)aklaver(dot)com> wrote:
> Yeah, what I would like to know is how many of the data breaches actually grab directly from the storage versus getting it through the database or other software above the storage?

Essentially zero.

PCI, like a lot of data security standards, are a magpie's assemblage of things that the authors have heard about all of which sound "secure" to them. However, since these particular magpies have machine guns (metaphorically) and can do serious damage to businesses, we must play along with the masquerade.

In response to

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Bruce Momjian 2025-10-31 17:06:21 Re: Enquiry about TDE with PgSQL
Previous Message Adrian Klaver 2025-10-31 17:01:07 Re: Enquiry about TDE with PgSQL