Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1vEw8M-0043E4-Gp for pgsql-general@arkaria.postgresql.org; Fri, 31 Oct 2025 20:54:05 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1vEw8K-000g86-Dz for pgsql-general@arkaria.postgresql.org; Fri, 31 Oct 2025 20:54:03 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1vEw8K-000g7y-3g for pgsql-general@lists.postgresql.org; Fri, 31 Oct 2025 20:54:03 +0000 Received: from momjian.us ([72.94.173.45]) by magus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1vEw8G-005JDS-2G for pgsql-general@postgresql.org; Fri, 31 Oct 2025 20:54:02 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=momjian.us; s=2025010100; h=In-Reply-To:Content-Transfer-Encoding:Content-Type: MIME-Version:References:Message-ID:Subject:Cc:To:From:Date:Sender:Reply-To: Content-ID:Content-Description; bh=mqhXix9wU/TFXKfn9ymGbdh2Qhq+3k6XzeG/S/l3GW4=; b=seziv4avt0OKx78YOzW/dGsl2r eb1ZmOZuN3J6MYPKAQSDCw1y6NyG6oXgEreNek241icSM77hm9H56w6O8p2jXKdXD1275BM+StLQ/ 0P+V2CzYKjaX/7hrB3ihMpZvDFt8RqNbK/x/BFFTfn+1jB/XTSgUr+l1+CWdGd87cAcuibBOBHNfO HUkn0tS/SOQml73kc0xb9uXxXan/8R49yMGZwswrzx/87lILeYf7OMIDGWN2jpGfidEAByOjLMf9a 4TYs6PcOf1EWjnazI/peg1T9LZCTeahifgMz7tIo1NjMT2sTdyy+H3he6ZCNKLnhViSsVf0O9M412 26uEyF9A==; Received: from bruce by momjian.us with local (Exim 4.98.2) (envelope-from ) id 1vEw8D-00000009g7D-458J; Fri, 31 Oct 2025 16:53:57 -0400 Date: Fri, 31 Oct 2025 16:53:57 -0400 From: Bruce Momjian To: Kai Wagner Cc: =?utf-8?Q?=C3=81lvaro?= Herrera , Christophe Pettus , Adrian Klaver , Laurenz Albe , Ron Johnson , pgsql-general Subject: Re: Enquiry about TDE with PgSQL Message-ID: References: <202510311727.f5ifxfb6ufgd@alvherre.pgsql> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk On Fri, Oct 31, 2025 at 09:04:32PM +0100, Kai Wagner wrote: > On Fri, Oct 31, 2025 at 7:22 PM Bruce Momjian wrote: > > On Fri, Oct 31, 2025 at 06:33:54PM +0100, Álvaro Herrera wrote: > > On 2025-Oct-31, Bruce Momjian wrote: > > > > > Yes, we have been avoiding the masquerade for years.  The question is > > > can we continue.  From the lack of discussion since April 1, 2025, it > > > seems the answer is yes. > > I think this assumption can be considered a false positive. The main reason > this hasn't surfaced yet is that it first takes some time to adjust, and more > importantly, there are the downstream forks with the necessary changes that are > already in use or continue to be sold. So why stop doing this? Keep in mind this is coming up seven months after the standard became effective, and it is being brought up by someone from Percona, and not from an end-user. I would have thought we would have had more end users complaining. > I don't think, as stated initially, that we can continue to ignore this any > longer. As a project, we are losing out on a significant number of users who > are willing to use fully open-source solutions, but are held back due to this > requirement. We had numerous conversations over the last few years, exactly > about this fact, and people went with MySQL, Mongo, or others - not because of > "does this technically make sense to us as engineers, but because they couldn't > fulfill their internal requirements". As Laurenz already stated very well: > "rational arguments are missing the point". > > It's not news that we also tried a way of implementing it. What I would like to > achieve here is a group of interested people who can actually make a call on > how this is envisioned to work. Do we handle everything in core directly, or do > we make all necessary parts extensible? This approach may be more efficient in We created a group several years ago, got pretty far, but ended up stopping for reasons I stated in my blog. I am not excited about doing this again unless there is a clear change of community opinion, which I have not seen. -- Bruce Momjian https://momjian.us EDB https://enterprisedb.com Do not let urgent matters crowd out time for investment in the future.