From: "Clay Jackson (cjackson)" <Clay.Jackson@quest.com>
To: Bruce Momjian <bruce@momjian.us>, Christophe Pettus <xof@thebuild.com>
CC: Adrian Klaver <adrian.klaver@aklaver.com>, Kai Wagner
	<kai.wagner@percona.com>, Laurenz Albe <laurenz.albe@cybertec.at>, Ron
 Johnson <ronljohnsonjr@gmail.com>, pgsql-general
	<pgsql-general@postgresql.org>
Subject: RE: Enquiry about TDE with PgSQL
Thread-Topic: Enquiry about TDE with PgSQL
Thread-Index:
 AQHcPFne1JzuDE18N0KxA2R/9Mt46rTFWROAgABw9QCAACUYAIAVR7UAgAEuQwCAAA6oAIAAB44AgAAc24CAAAB/gIAABvMA
Date: Fri, 31 Oct 2025 17:32:23 +0000
Message-ID:
 <CO1PR19MB4984F31E10CA30299FED53669BF8A@CO1PR19MB4984.namprd19.prod.outlook.com>
References:
 <CACgMzfwSDRF+kQr59h0-xGUobCeFZxwVzE_tUxF18DkVb+vuDQ@mail.gmail.com>
 <CAKAnmmKDCOdUT5JtJZz5papMO0zW1cnG4934d6aQVCQ_KdbUeg@mail.gmail.com>
 <CANzqJaA41CzNjkiQex+A0u9z11i6R3WQZJ+fkXfJO7VJwOMWzg@mail.gmail.com>
 <a1dae4a583d560a90c67872b766ead02ddb13e51.camel@cybertec.at>
 <aQPDvqUzZVKkaxsS@momjian.us>
 <CAG0qCNhL=SEB4vc4v48PxN1F-t8htC463TpX7KDNWQ-s3s8dtA@mail.gmail.com>
 <aQTNmM-3VeTRZdx0@momjian.us>
 <df60c2f9-21df-4c04-a33c-5ae8ec74d431@aklaver.com>
 <E94D3E44-8BF5-45F8-9497-3918A8488706@thebuild.com>
 <aQTsjVoYDWU2GaLJ@momjian.us>
In-Reply-To: <aQTsjVoYDWU2GaLJ@momjian.us>
Accept-Language: en-US
Content-Language: en-US
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0:
 =?iso-8859-1?Q?MFQIMCnnrEEreMXNGHztXgAZ/EwCJ3pI6R1f1sEob8v2i8JNvkMqqlPCVX?=
 =?iso-8859-1?Q?O9bCLlrbHWAU7qscfuPwmhrVWVTZqXSPdrY9B1dKH9RyIigKThikLNK6ar?=
 =?iso-8859-1?Q?IkM7Up6uvQ2zspxADBoZbms0nlNqwECaxSukJsuO8ATW6DpgXqPisOxX2b?=
 =?iso-8859-1?Q?5XCNUTC0aPaM0YgIok1MDrD8mMskyhYpUyoTOGX54WwHjs2C42j1sFAzql?=
 =?iso-8859-1?Q?0BK7cHC/ngfBP8vULlv0e6UiIgIyGu/sQMyKIw66MdZEDehMXgOMWIN4fy?=
 =?iso-8859-1?Q?oArPrAiYW9LM50FMLmBsOYx2N6G2DR9Su8U1p+rk37DsTpYXiIadtQDYQ3?=
 =?iso-8859-1?Q?NHKtZVTqgHZwDAQAgbqG7jOo3ZaKHa4ZYc4GeM19wjPCVpIBOBnKg3dK4D?=
 =?iso-8859-1?Q?4cGJdhBC6pPLHEq+mhlJQ5SD4ig2LZPe7ExXS4wLxhlBgBZgDH9uMsdILb?=
 =?iso-8859-1?Q?UnURdhZIoEeflSX6kx+hO084RqYTzzUmVZwvdVZr5MQk5G9wp4R8pCxSBg?=
 =?iso-8859-1?Q?nI7u0ZWhTnud3tw1bsnv6739IwyTUscPbedquSsbpspthlBSSuyC7M7Ht0?=
 =?iso-8859-1?Q?B9z/MwPNiPEJ76x9o5ndth1krrWdB+oE/VZxsAPHghie+R/Q/wbmL3CXmw?=
 =?iso-8859-1?Q?D8xVV742iZy8O5n4J4mAVrak7mHNIEMeaDe5tAELwf3/88X7oE9SvL6kG4?=
 =?iso-8859-1?Q?nPIeHPqM8uW5md7LFo8oV5PcAAlTdm4LtFMQllB3Sl+JYdTSKYqNVe8Q4o?=
 =?iso-8859-1?Q?HIAS3FXRZuiawEF38febH9WrShz4XsoGpfxY4THMzxFaLuMxGMLyIUOfnp?=
 =?iso-8859-1?Q?KTgrHHw1RPVbW6/KKjjMdwf6DwdhZWWu4y5k1mSlV8gj3lNeLJIEmZsasy?=
 =?iso-8859-1?Q?tmKV+0ZdrOvA7yOCvK+FnlLLJWCMpi3WquJYBZfWGU185PG6B+TB1SNMy9?=
 =?iso-8859-1?Q?77Wz1spJHN6mcuhJXOkNAX+S6TO2KQHTdLKaSRSBT9eN/JtA2hYYRku2gA?=
 =?iso-8859-1?Q?hI9DLLyXe9O9ISl1d+pZPZV0P3PbvhJPwDs7WEPma12miBkfH8S0zcP14f?=
 =?iso-8859-1?Q?t4ts5ZE1cV99jODUAVZw93eEP0fdZj1P0YfnlUCUiMwKKQv0IWzE2bif0L?=
 =?iso-8859-1?Q?zag4gMc95Y3ld+gxnIE3XG/auiLISnK9XwbHOEStsW20xAA+flFU0Kq9LJ?=
 =?iso-8859-1?Q?92cN25ya5M3WOUseeOQli/jKZqPE5XeDH2qYEsIlboZBQi/xpzsnm2VDTL?=
 =?iso-8859-1?Q?axobzWrti7CsJGta3KXMxcsH4gKyw9l+kDXrQTJguslhCpm4W/yfQjHrl/?=
 =?iso-8859-1?Q?0ZEPdLMFWCyxgW51BhLMEsS+UEuFjKY+jrqtvDLwDsB9fjvlYGHv6i/zfH?=
 =?iso-8859-1?Q?nTcXPRCrnd7WvgHig+HgJcN3xW7OpxO8+EMVA5MSIlF0gda8SqnednSLIo?=
 =?iso-8859-1?Q?BNJX1PQiFOgIwpvWcvlAUqNXZDCuuYCUqmPSksRVlB+9tMSXhINCyoHZC+?=
 =?iso-8859-1?Q?fw7EqHk5ty8YGc6JtTzGja7MYInt2pa9xMC6rMOeRbSITcZX01GDN1OEvU?=
 =?iso-8859-1?Q?NmUcH0oOmsYxpdSRSHE8b2uOWY7CT+q6A4a9HMmYXOWxj4Puw3/msdTwdf?=
 =?iso-8859-1?Q?6sNlI1yeuKoO60pDAJqnjpxVS3wDpPkuJA?=
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: quest.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: CO1PR19MB4984.namprd19.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 6021afe0-d6b8-480d-f490-08de18a373bf
X-MS-Exchange-CrossTenant-originalarrivaltime: 31 Oct 2025 17:32:23.3827
 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 91c369b5-1c9e-439c-989c-1867ec606603
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: Q8SPV/i43t37sezzFJbDjBcH0XEWptOXT4krX/kLBRmwFMB15g5+jDd9JYCQp9N2FW+5nzCxgR9iM6juqEfsaQ==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: IA0PR19MB8132
List-Id: <pgsql-general.lists.postgresql.org>
List-Help: <https://lists.postgresql.org/manage/>
List-Subscribe: <https://lists.postgresql.org/manage/>
List-Post: <mailto:pgsql-general@lists.postgresql.org>
List-Owner: <mailto:pgsql-general-owner@lists.postgresql.org>
List-Archive: <https://www.postgresql.org/list/pgsql-general>
Archived-At: <https://www.postgresql.org/message-id/CO1PR19MB4984F31E10CA30299FED53669BF8A%40CO1PR19MB4984.namprd19.prod.outlook.com>
Precedence: bulk

Pardo me for jumping in here - but would filesystem level encryption possib=
ly meet your requirements?

Clay Jackson
Database Solutions Sales Engineer
clay.jackson@quest.com
office  949-754-1203  mobile 425-802-9603

-----Original Message-----
From: Bruce Momjian <bruce@momjian.us>
Sent: Friday, October 31, 2025 10:06 AM
To: Christophe Pettus <xof@thebuild.com>
Cc: Adrian Klaver <adrian.klaver@aklaver.com>; Kai Wagner <kai.wagner@perco=
na.com>; Laurenz Albe <laurenz.albe@cybertec.at>; Ron Johnson <ronljohnsonj=
r@gmail.com>; pgsql-general <pgsql-general@postgresql.org>
Subject: Re: Enquiry about TDE with PgSQL

CAUTION: This email originated from outside of the organization. Do not fol=
low guidance, click links, or open attachments unless you recognize the sen=
der and know the content is safe.


On Fri, Oct 31, 2025 at 10:04:35AM -0700, Christophe Pettus wrote:
>
>
> > On Oct 31, 2025, at 08:21, Adrian Klaver <adrian.klaver@aklaver.com>
> > wrote:  Yeah, what I would like to know is how many of the data
> > breaches actually grab directly from the storage versus getting it
> > through the database or other software above the storage?
>
> Essentially zero.
>
> PCI, like a lot of data security standards, are a magpie's assemblage
> of things that the authors have heard about all of which sound
> "secure" to them.  However, since these particular magpies have
> machine guns (metaphorically) and can do serious damage to businesses,
> we must play along with the masquerade.

Yes, we have been avoiding the masquerade for years.  The question is can w=
e continue.  From the lack of discussion since April 1, 2025, it seems the =
answer is yes.


--
  Bruce Momjian  <bruce@momjian.us>        https://momjian.us/
  EDB                                      https://enterprisedb.com/

  Do not let urgent matters crowd out time for investment in the future.