Subject: Re: Encryption in pg_dump
To: pgsql-admin@lists.postgresql.org
References: 
 <CAD7GeHRZ3tu8y9VG_0juVK3RQq6r+t6HciguEz_C8Eh85Hmq3A@mail.gmail.com>
 <2BCA8D4B-E94D-4F2F-99A5-D783912A1CDF@gmail.com>
 <20200722185541.GE3899@momjian.us>
 <6D40812C-3F42-41A2-A548-4EC7754DF473@gmail.com>
 <CAD7GeHQMywQk4yauS34Xw8kmEM3ut8ajF=WhB4rguezOT9P5wQ@mail.gmail.com>
 <D1F590FD-D8FB-49EF-9D3E-84D2EFF7AE73@elevated-dev.com>
From: Ron <ronljohnsonjr@gmail.com>
Message-ID: <450954f7-c8aa-09cf-ad9c-0a63c9437cc4@gmail.com>
Date: Thu, 23 Jul 2020 09:30:13 -0500
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101
 Thunderbird/68.8.0
MIME-Version: 1.0
In-Reply-To: <D1F590FD-D8FB-49EF-9D3E-84D2EFF7AE73@elevated-dev.com>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit
Content-Language: en-US
Precedence: bulk

On 7/23/20 8:52 AM, Scott Ribe wrote:
>> On Jul 22, 2020, at 11:29 PM, vinod kale <vinod16895@gmail.com> wrote:
>>
>> Actually our requirement is neither any of the data in readable format on server.
> Sounds like you need encryption at the disk or volume level.

Volume encryption only protects against stolen disks, which is... highly 
unlikely.  (The only scenarios I can think of are USB drives which get lost 
in transit -- think "station wagon full of tapes hurtling down the highway 
-- and law enforcement seizing the computers.)

TDE, though, protects against hackers who break in and try to slurp out as 
much data as possible.  Still pretty unlikely, but within the realm of reason.

-- 
Angular momentum makes the world go 'round.