From: Timothy Madden <terminatorul@gmail.com>
Cc: Scott Marlowe <scott.marlowe@gmail.com>
Cc: Joe Conway <mail@joeconway.com>
Cc: pgsql-admin@postgresql.org
Subject: Re: Database level encryption
Date: Tue, 6 Apr 2010 17:59:59 +0300
Message-ID: <g2x5078d8af1004060759t1f6e0070u288201c87f925ca2@mail.gmail.com> (raw)
In-Reply-To: <4BBB009102000025000304D3@gw.wicourts.gov>
References: <q2y5078d8af1004030635g624bf8f7r580cb3ebe7135b74@mail.gmail.com>
<4BB774D4.3070306@joeconway.com>
<m2r5078d8af1004051330n1874e532u3c88fd1bc31c8697@mail.gmail.com>
<v2ldcc563d11004051334ledfcd2b2gf8db60ca48b43118@mail.gmail.com>
<4BBA05E80200002500030493@gw.wicourts.gov>
<4BBA6924.5050305@joeconway.com>
<j2v5078d8af1004060245g35b87d5av329ab7a6af9a5579@mail.gmail.com>
<4BBB009102000025000304D3@gw.wicourts.gov>
The machine does not have internet and it will not be trivial for the
bad guy to install anything there.
And my idea is exactly that the database is inaccessible, even if the
server starts. Unless the password is provided upon connecting or
selecting the database. You can think of it as if all columns in all
tables are ecrypted (although I would like even the number and names
of tables and schema-objects to be encrypted).
On Tue, Apr 6, 2010 at 5:36 PM, Kevin Grittner
<Kevin.Grittner@wicourts.gov> wrote:
> Timothy Madden <terminatorul@gmail.com> wrote:
>
>> With an encrypted database, you need the password anytime you
>> connect, even if another application already has an open
>> connection.
>
> How is the database server supposed to start up and become ready to
> accept connections without reading the database?
>
> Also, as previously mentioned, if a bad guy gets hold of the machine
> while running, what prevents them from installing a daemon to record
> and transmit keystrokes after they copy the encrypted data?
>
> Perhaps an encrypted drive for the database data combined with an
> aggressive lockup policy for an idle machine would work?
>
> -Kevin
>
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: terminatorul@gmail.com, scott.marlowe@gmail.com, mail@joeconway.com
Subject: Re: Database level encryption
In-Reply-To: <g2x5078d8af1004060759t1f6e0070u288201c87f925ca2@mail.gmail.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox