Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1vEsB4-002Akg-7p for pgsql-general@arkaria.postgresql.org; Fri, 31 Oct 2025 16:40:37 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1vEsB3-00GIsp-84 for pgsql-general@arkaria.postgresql.org; Fri, 31 Oct 2025 16:40:36 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1vEsB2-00GIsO-St for pgsql-general@lists.postgresql.org; Fri, 31 Oct 2025 16:40:35 +0000 Received: from mail-ej1-x636.google.com ([2a00:1450:4864:20::636]) by makus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.96) (envelope-from ) id 1vEsB0-004lWD-0P for pgsql-general@postgresql.org; Fri, 31 Oct 2025 16:40:35 +0000 Received: by mail-ej1-x636.google.com with SMTP id a640c23a62f3a-b3b3a6f4dd4so499899366b.0 for ; Fri, 31 Oct 2025 09:40:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cybertec.at; s=google; t=1761928832; x=1762533632; darn=postgresql.org; h=mime-version:user-agent:content-transfer-encoding:references :in-reply-to:date:cc:to:from:subject:message-id:from:to:cc:subject :date:message-id:reply-to; bh=AJiVuMBJy0thabaiUyy9O/03FIZ8bHtj/6nqwu4XTm0=; b=FWgfmftWhx5mRy6tulm85SytGaDsaY2y0gICJjnHRzq+Ze44k7Sj2cli839Zgm0EpQ 1sPtOl/hTJuoxzDHHBvK/RYP93RV61gQWUaUU/UCKsUy6YiMe/rMpLiAjvcVTK5ont8w SOGdcHayAPxuHMQhXLTvA6chEvyF/yHscW8NI5Y/yqBBN5wYnyMql5CGSBggDrc2XzEQ NdFGc/pc03n1BnnmuWSHOP5MbSAKvDQXAw2diyXlg8U/fmR4Bs6M8UUonPjI8fLw7sKX bphKLvqRio3VBVHwwhX7oVzaFovIpxiiZkjiexBrmCZBmz4pWZWnLZ5+ksAbU+j+dTaJ YfiQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1761928832; x=1762533632; h=mime-version:user-agent:content-transfer-encoding:references :in-reply-to:date:cc:to:from:subject:message-id:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=AJiVuMBJy0thabaiUyy9O/03FIZ8bHtj/6nqwu4XTm0=; b=Z6KgeOwLnHe2Ehoze8hYHsAHutLQjEahuAFJA6TFeL+PnVWKLlcuIbR66KFfbQrnXu xxwv2XXnXU1c17u5JSNPSCH/HAQi6XW95BM7zb8A5j/cXdnyp2K0PDzkeO/8zyss8ALo exKXNWBj59ZJq1hc63y9sFLXnPRCCnGh3xQz5Yqn0yALBqeIm6woyBz7R47wrzVk8DrC Cd4ZUfQTXUfGluJP7JRVN5t/YPwaYkrQaEl4oFQhSMjK18HIqbuHMLwkr61USD/KnlJt 8wKBmtZA2W4tEV9j6dP1iWz7GcnpnrKCmbg7uhJ6BDtZIkqKoEmYw4oUI2rujXqxNBWF gUfQ== X-Forwarded-Encrypted: i=1; AJvYcCVDkffSFVxYoCUTksZQnZIZmZ1E2RW7q1Aw1FLxLfV+Npp6jPX/qd6kqKIbWFbLkhaFdGihWWTpVW41sspe@postgresql.org X-Gm-Message-State: AOJu0YyXF1mFF9Kw2Fa3sgPGZ0nl5tFUKXy+JivU0RVDquKLo02ST1dJ xPkT4u8Hxe4NwGBnDf9gSFyLHcrpZ/Fg6/jd1C2Z+X174zUTDFl4EcgX0j20ySpz4Ek= X-Gm-Gg: ASbGnct0w0IYOgKD9fAHeRJfW0z1n/4hEc2w7zGuGkMfJaHIBkAPyWGFvXAZngLUz46 bHi2McMgjOcIJZ8u9lUmHktMcd0J1wBGXu00juZrbcso+960y2+x43Co1m9s9pWOe007WgNjCyY d0Hl+FjzHFTFxnOqIjRsHpmfQw2wh+0BaTfGqLyU94ZhWniJ8UWvGJctMORSfhqpWcdH5aVE5ti 5dWppeWGCz768HP3H0ZUOhOjXkezqxTVUgKFGcSGOq+RXaHTvb0IStZvomBqKDZuXHi738s4LtZ rQQ0V76fmUVPMJB/73hc2xILXr1b/1G/65nyE/l0ulZ5YKsxqHkvHLOqRM8eprZbZGPZkFsjlAa lxh5AG3KhicX9jUaARXkhr/8JG6XjcR3RxiZn0U9Q8N69rcGWlPpozNgYDf6DsHnO5FF1hmZIq9 TGjUnRfP9g7+HfZyRUWhI9vrRR12ogP3g= X-Google-Smtp-Source: AGHT+IH6uVM07YpMweJOP5XCj9nyQ0Ky/EU3S6XjrVDzfryX87tbxYLF2Gv2n2wV3EA9ZE65K6NCGw== X-Received: by 2002:a17:906:c10c:b0:b4a:e11a:195b with SMTP id a640c23a62f3a-b707062f00bmr414274966b.44.1761928832534; Fri, 31 Oct 2025 09:40:32 -0700 (PDT) Received: from laurenz.albe-K4N0CV00F97414D ([2001:871:260:4fa0:f825:7e20:4f27:4e7b]) by smtp.gmail.com with ESMTPSA id 4fb4d7f45d1cf-64092e1a405sm120764a12.31.2025.10.31.09.40.31 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 31 Oct 2025 09:40:32 -0700 (PDT) Message-ID: <045231b7bc903e51229aa2fd8e634bdf690aa4ff.camel@cybertec.at> Subject: Re: Enquiry about TDE with PgSQL From: Laurenz Albe To: Adrian Klaver , Bruce Momjian , Kai Wagner Cc: Ron Johnson , pgsql-general Date: Fri, 31 Oct 2025 17:40:31 +0100 In-Reply-To: References: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable User-Agent: Evolution 3.56.2 (3.56.2-2.fc42) MIME-Version: 1.0 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk On Fri, 2025-10-31 at 08:21 -0700, Adrian Klaver wrote: > Yeah, what I would like to know is how many of the data breaches=20 > actually grab directly from the storage versus getting it through the=20 > database or other software above the storage? It seems to me social=20 > engineering plays a bigger role in this. This is not about actual security considerations, it is about checkboxes. Consequently, rational arguments are missing the point. Yours, Laurenz Albe