pg.ddx.io  pgsql-admin@postgresql.org mailing list archive  

help / color / mirror / Atom feed

From: Craig James <craig_james@emolecules.com>
To: pgsql-admin@postgresql.org
Subject: secret key for encryption
Date: Fri, 16 Jul 2010 09:56:41 -0700
Message-ID: <4C408F49.10605@emolecules.com> (raw)
In-Reply-To: <4C4038EC0200002500033719@gw.wicourts.gov>
References: <4C4038AC0200002500033716@gw.wicourts.gov>
	<4C4038EC0200002500033719@gw.wicourts.gov>
	<4C4038EC0200002500033719@gw.wicourts.gov>

This isn't exactly a Postgres question, but I hope someone in the community has solved it.

I want to encrypt some data in Postgres that arrives from Apache.  How do you store an encryption key in such a way that Apache CGIs can get it, but a hacker or rogue employee who manages to access the machine can't find out the encryption key?

Thanks,
Craig

view thread (3+ messages)  latest in thread

Message-ID: <4C408F49.10605@emolecules.com>
Permalink:  ../4C408F49.10605@emolecules.com/
Also on:    postgresql.org/message-id/4C408F49.10605@emolecules.com

copy link · copy postgr.es

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-admin@postgresql.org
  Cc: craig_james@emolecules.com
  Subject: Re: secret key for encryption
  In-Reply-To: <4C408F49.10605@emolecules.com>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox