Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1jydKa-0002VW-Ck for pgsql-admin@arkaria.postgresql.org; Thu, 23 Jul 2020 15:40:24 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1jydKZ-0006vO-60 for pgsql-admin@arkaria.postgresql.org; Thu, 23 Jul 2020 15:40:23 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1jydKY-0006vH-Uk for pgsql-admin@lists.postgresql.org; Thu, 23 Jul 2020 15:40:22 +0000 Received: from mailout.easymail.ca ([64.68.200.34]) by magus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1jydKW-0002WJ-M8 for pgsql-admin@lists.postgresql.org; Thu, 23 Jul 2020 15:40:22 +0000 Received: from localhost (localhost [127.0.0.1]) by mailout.easymail.ca (Postfix) with ESMTP id 82CF0A0F68; Thu, 23 Jul 2020 15:40:18 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at emo05-pco.easydns.vpn Received: from mailout.easymail.ca ([127.0.0.1]) by localhost (emo05-pco.easydns.vpn [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EiJV6YSzwi7m; Thu, 23 Jul 2020 15:40:18 +0000 (UTC) Received: from shr-macbook-pro.local (unknown [4.28.96.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mailout.easymail.ca (Postfix) with ESMTPSA id 4E55BA0FD8; Thu, 23 Jul 2020 15:40:14 +0000 (UTC) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.80.23.2.2\)) Subject: Re: Encryption in pg_dump From: Scott Ribe In-Reply-To: <8BEC1C53-7E4F-436A-8F3A-E9EDD9135F05@crazybean.net> Date: Thu, 23 Jul 2020 09:40:13 -0600 Cc: Ron , pgsql-admin@lists.postgresql.org Content-Transfer-Encoding: quoted-printable Message-Id: <42EE88BD-3114-4600-A466-9BCDC15D075E@elevated-dev.com> References: <2BCA8D4B-E94D-4F2F-99A5-D783912A1CDF@gmail.com> <20200722185541.GE3899@momjian.us> <6D40812C-3F42-41A2-A548-4EC7754DF473@gmail.com> <450954f7-c8aa-09cf-ad9c-0a63c9437cc4@gmail.com> <8BEC1C53-7E4F-436A-8F3A-E9EDD9135F05@crazybean.net> To: Rui DeSousa X-Mailer: Apple Mail (2.3608.80.23.2.2) List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk > On Jul 23, 2020, at 9:34 AM, Rui DeSousa wrote: >=20 > Encryption at rest also protects from warrantee service where you=E2=80=99= re sending a failed drive back to a vendor. I could see the drive being = refurbished and send out with readable data on it if not encrypted.=20 And potentially allows you to reuse the drive. And *if* the server/drive = is stolen, in the US at least, means you don't have a breach and don't = have to notify customers.=