Received: from maia.hub.org (unknown [200.46.204.183]) by mail.postgresql.org (Postfix) with ESMTP id DD2E56369F6 for ; Tue, 6 Apr 2010 15:09:02 -0300 (ADT) Received: from mail.postgresql.org ([200.46.204.86]) by maia.hub.org (mx1.hub.org [200.46.204.183]) (amavisd-maia, port 10024) with ESMTP id 26452-02-9 for ; Tue, 6 Apr 2010 18:08:52 +0000 (UTC) X-Greylist: domain auto-whitelisted by SQLgrey-1.7.6 Received: from lo.gmane.org (lo.gmane.org [80.91.229.12]) by mail.postgresql.org (Postfix) with ESMTP id D07AF636EBC for ; Tue, 6 Apr 2010 14:37:13 -0300 (ADT) Received: from list by lo.gmane.org with local (Exim 4.69) (envelope-from ) id 1NzCi8-0002Ac-K6 for pgsql-admin@postgresql.org; Tue, 06 Apr 2010 19:37:12 +0200 Received: from g224125059.adsl.alicedsl.de ([92.224.125.59]) by main.gmane.org with esmtp (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Tue, 06 Apr 2010 19:37:12 +0200 Received: from tim by g224125059.adsl.alicedsl.de with local (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Tue, 06 Apr 2010 19:37:12 +0200 X-Injected-Via-Gmane: http://gmane.org/ Mail-Followup-To: pgsql-admin@postgresql.org To: pgsql-admin@postgresql.org From: Tim Landscheidt Subject: Re: Database level encryption Date: Tue, 06 Apr 2010 17:36:54 +0000 Organization: Lines: 10 Message-ID: References: <4BB774D4.3070306@joeconway.com> <4BBA05E80200002500030493@gw.wicourts.gov> <4BBA6924.5050305@joeconway.com> <4BBB009102000025000304D3@gw.wicourts.gov> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Complaints-To: usenet@dough.gmane.org X-Gmane-NNTP-Posting-Host: g224125059.adsl.alicedsl.de Mail-Copies-To: never User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/23.1 (gnu/linux) Cancel-Lock: sha1:HfQy5+Y0qPzJDALG1s31/1eV0lQ= X-Virus-Scanned: Maia Mailguard 1.0.1 X-Spam-Status: No, hits=0.001 tagged_above=-10 required=5 tests=BAYES_50=0.001 X-Spam-Level: X-Archive-Number: 201004/50 X-Sequence-Number: 34144 Timothy Madden wrote: > The machine does not have internet and it will not be trivial for the > bad guy to install anything there. > [...] Then why bother encrypting the database if $BADGUY cannot access it without your installed application anyhow? Tim