Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lNcA0-0005sj-9M for pgsql-admin@arkaria.postgresql.org; Sat, 20 Mar 2021 14:01:00 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1lNc9z-0003V9-81 for pgsql-admin@arkaria.postgresql.org; Sat, 20 Mar 2021 14:00:59 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lNc9z-0003V2-0s for pgsql-admin@lists.postgresql.org; Sat, 20 Mar 2021 14:00:59 +0000 Received: from mail-qt1-x836.google.com ([2607:f8b0:4864:20::836]) by magus.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.92) (envelope-from ) id 1lNc9w-00083e-N0 for pgsql-admin@lists.postgresql.org; Sat, 20 Mar 2021 14:00:58 +0000 Received: by mail-qt1-x836.google.com with SMTP id l13so9018627qtu.9 for ; Sat, 20 Mar 2021 07:00:56 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=joeconway.com; s=google; h=subject:to:cc:references:from:message-id:date:user-agent :mime-version:in-reply-to:content-language:content-transfer-encoding; bh=aoWJb4MmEiH5DW7vkrinkNSoJES33s55lozDjI7XwFQ=; b=hud93+D+amiZscgBw0Y6CpFRfnNQ93vxQg9h6JuFpvwoEsBiYhwLUGN26GwW0gwwSS 4D/p8SXIK/qfoXdBzmYNXFnVmhzak2SQ+BleSZZVT5Xm0XfhE738kBhBlz2mwrI/5ijC DpmKiQPLkdX7Ykz0LDNWoEpA5Meh7QAwU0awxSKtbxTQCKDWG6YwnHRdwvNyzJmLzyKj GUbhrJXyi6m9+aCM9WvPlf4xQsUSMMzOnJKgOiohtK7AFC8dr1GjFWLOkw0YW/4VT6OP iPyq/YZx9S7fx7505ZG3ivEZ3hFK2PrdyQ6wIdbwdjMlY/FZvYiiCZhGASX4RFwIbAbv NleA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:cc:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=aoWJb4MmEiH5DW7vkrinkNSoJES33s55lozDjI7XwFQ=; b=TL5JpKrYEzZd7veIqhHXONksGBuTeOd5EYJxL1FEojYcIm+GQQiFmbw6N7Q0gRWd4/ bO7rCkNzi6XOXyJpdAMZEMK22S+dL9uy0/fK1obAqceiTZhjNF3t/7wBedZ52lV0HqIG YMj7uwfu/PYpTIypf+zY3m2/bTRX2gvlbEhtC8+/+gakEQD/SzGB3zaKrax6/K0ubkLo PnGsDgoEs+x1BA2uY1dgT9J/3imqgz/DRUMtDnUmdhqZSlFhjTDR6b3KNihuFQh6UT9f M/b7iZRtqC+1Qk0eWpioZ/II0OJjLNQiqMQAheaXBlGUePKDL6kNfkVETiteOQ4Y1YZu fO8w== X-Gm-Message-State: AOAM530Vc+innIkGCs8ouSjYbBlyprdqxlrQmNwf7+9L9aqQl3qDSdAE LiQESWYYXklKr4VEe+Q/KHFeZUYtnOx/1iXz4ykdM5/OltPp7O+xN1G3tZ+WZF+flyToMPfoPh1 Rz9B077uW1WROFpJ/6pHEKX3gGAh4lhRtS+dGkUTjPhBMV5gMH721iYAy8ko74nrefedjWeC3AV obq+Ot0dBQ X-Google-Smtp-Source: ABdhPJzw4j4oumZLh6+wl32kmp3FThsJ5QzSXWQeZdOCvosIZYzhCFjJvYOhRjrD1+Wx+jEYAxIjtQ== X-Received: by 2002:ac8:5c44:: with SMTP id j4mr2552420qtj.253.1616248854875; Sat, 20 Mar 2021 07:00:54 -0700 (PDT) Received: from [192.168.4.41] (072-017-018-098.res.spectrum.com. [72.17.18.98]) by smtp.gmail.com with ESMTPSA id g4sm1946662qtg.86.2021.03.20.07.00.54 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Sat, 20 Mar 2021 07:00:54 -0700 (PDT) Subject: Re: Postgres security books To: Yambu , Holger Jakobs Cc: Pgsql-admin References: <16A41E1E-B36D-4988-9410-C692DD447F43@jakobs.com> From: Joe Conway Message-ID: <75acc236-9a99-67a4-4dad-19a751786e42@joeconway.com> Date: Sat, 20 Mar 2021 10:00:53 -0400 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Thunderbird/78.7.1 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk On 3/20/21 9:57 AM, Yambu wrote: > Thanks a lot. > > On Sat, Mar 20, 2021 at 3:49 PM Holger Jakobs > wrote: > Am 20. März 2021 14:00:12 MEZ schrieb Yambu >: > Which books are good in explaining postgres security? > > Not really books, but helpful: Also not books, and shameful self promotion ;-), but in any case you may find these helpful: https://blog.crunchydata.com/blog/postgresql-defaults-and-impact-on-security-part-1 https://blog.crunchydata.com/blog/postgresql-defaults-and-impact-on-security-part-2 -- Crunchy Data - http://crunchydata.com PostgreSQL Support for Secure Enterprises Consulting, Training, & Open Source Development