Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1vFGkr-009xDN-4v for pgsql-general@arkaria.postgresql.org; Sat, 01 Nov 2025 18:55:12 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1vFGkp-006leN-90 for pgsql-general@arkaria.postgresql.org; Sat, 01 Nov 2025 18:55:10 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1vFGko-006le7-Je for pgsql-general@lists.postgresql.org; Sat, 01 Nov 2025 18:55:09 +0000 Received: from mx0a-0010f301.pphosted.com ([148.163.149.254]) by magus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1vFGkj-005SRk-2Y for pgsql-general@postgresql.org; Sat, 01 Nov 2025 18:55:08 +0000 Received: from pps.filterd (m0102855.ppops.net [127.0.0.1]) by mx0b-0010f301.pphosted.com (8.18.1.11/8.18.1.11) with ESMTP id 5A1DR0ts2903644 for ; Sat, 1 Nov 2025 13:55:02 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rice.edu; h=cc :content-type:date:from:in-reply-to:message-id:mime-version :references:subject:to; s=ricemail; bh=N4Okmk3mowBjW32r3v5nDIwRL P2knklqYM74S30IVyo=; b=hj8PkQYgrbcf5jMEvyiR0I41egch/QgFIhaEVrWrA +egq2xH32R5FmMc06hIjBqY4yhgkc/Ovoq9+/h+v8bT++oBFLpAboqbLJfrBY7sD EpwYkXeB9IHsXiwnI4s0m/KtCYPm4CWqJ/Vs/hNWORl/NXfOAzpEb2ZT1uidK9IS A7yO3r0C0b2rVb/ndbIRQvOA+kDTjeg9vvWJgN6K5t9GIeqC/qBnQdcd5BlKTpeb OUeQuZ2z3wVfIYLPcap3GYrxwf7Ld0vIOhSm1HmEh13ml7jqCvIaMNVsCnvW84NV DVbTOI3whAtqcp+adzG9paqW1HT9jvRwP/jyIP2IvkmoA== Received: from mail-oi1-f198.google.com (mail-oi1-f198.google.com [209.85.167.198]) by mx0b-0010f301.pphosted.com (PPS) with ESMTPS id 4a5fh5gr6m-1 (version=TLSv1.3 cipher=TLS_AES_128_GCM_SHA256 bits=128 verify=NOT) for ; Sat, 01 Nov 2025 13:55:02 -0500 (CDT) Received: by mail-oi1-f198.google.com with SMTP id 5614622812f47-4481c0b3dc5so5226158b6e.1 for ; Sat, 01 Nov 2025 11:55:02 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1762023301; x=1762628101; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=N4Okmk3mowBjW32r3v5nDIwRLP2knklqYM74S30IVyo=; b=d1wcO6ZSMloeAoqHxmGSiy5pPGvcqx4edbHNijAeOgWpIa6gRIbL61su+QUSTYnP0G FoaP0iOy1mXxVJ9ELnByU59IxLv/CC9C3ouTQK9X650LtNKK5Xvy0EO8kh3uPhScwj+r L72HMRql4JrYQuNerUfMbX8G24X5f07J4rnwAzVHGTLjrO4vSSbuLdXhye/tTQrAfa0Q 6+4otArIRAH7VdKPkYhTYXKFH59YJkzfoD7Y6cXZuUvngcnLQTRr6aBOMYCvLGnQ5pJF eaIJEaTd9f926rT7iJkdP8+5/NwzoBCyR+wUg3FbvK6CsUcpG7tH5BusYMdZrqZk/iCd n0tA== X-Gm-Message-State: AOJu0Yz1AK0u8h5cVxdBNIHpOjs5x5S/jENIRTJKVPj8zxnyUU0mBDjN 4RPW2OkHG63J1EWPTxyRS4l1baspFphMQDwKcWV8BBsodKipKYwDi6fcmyXO6cO947Dt/fcuAyQ V/AnntusDzAUinulG+lBmjUsu5o4bXZF3HxfGoMQZCZYygO3wji/KvYNFj1ZV9BsJWo7hlqIIh1 VWc4hfptT7XXioIS1LuLspy0w3KPY= X-Gm-Gg: ASbGncs6yUDIfljnsQDnyeoZHuCDwDq/IXMxuYgyon/n0B1shKPhHJviuJB3A3UATLh XcndL1CYZWitWmm+mX+/vhhgPuPXOVB0XXZR2pCLJWZLR27fk3zTJpZG0MQrUD1E7jiYtktmCZm nA361qiXpJFk7zPHMAKuaZjy16helh/8y3Qx2zDXpkHo+3q+mgN4j1n/+NdxeGCrFrRSmXBwq9N /a5LqEnI0Ehse0644fhQHh3YoHyeJ/HKD36rLCNsR3tqAwn4lgZOPsi+3EiQiP5RqdGZiAg15hU GIvxIuEieiuBuUWo7shs00fQIjz0Sh7cVECahVXbTgbgAX269pOoy1tGrzwLeAzF4o7xhFgYkzp ObyRmry0OA8FORF2oAaMF1f/f5ds= X-Received: by 2002:a05:6808:13ca:b0:443:9f79:5d29 with SMTP id 5614622812f47-44f95212e2fmr3203782b6e.2.1762023301071; Sat, 01 Nov 2025 11:55:01 -0700 (PDT) X-Google-Smtp-Source: AGHT+IHdjMqqlC4EcopsbtzPpqGDyozNqo0HxRs1KmcK+P9zCfpcoeWjhzFDCBejFha/Jo20JfrNaA== X-Received: by 2002:a05:6808:13ca:b0:443:9f79:5d29 with SMTP id 5614622812f47-44f95212e2fmr3203775b6e.2.1762023300657; Sat, 01 Nov 2025 11:55:00 -0700 (PDT) Received: from customer.dllstxx1.pop.starlinkisp.net ([2605:59c8:449e:bc10:1a03:73ff:fecf:41f5]) by smtp.gmail.com with ESMTPSA id 5614622812f47-44f9d844d06sm1167093b6e.9.2025.11.01.11.54.57 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sat, 01 Nov 2025 11:54:58 -0700 (PDT) Received: by customer.dllstxx1.pop.starlinkisp.net (sSMTP sendmail emulation); Sat, 01 Nov 2025 13:54:56 -0500 Date: Sat, 1 Nov 2025 13:54:56 -0500 From: Ken Marshall To: pgsql-general@postgresql.org Cc: pgsql-general Subject: Re: Enquiry about TDE with PgSQL Message-ID: References: <3DC589BC-A5F6-49BC-BFFC-F1FCB0FF7E95@thebuild.com> <3985797c-639f-4825-9fa9-98a48b37f380@aklaver.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: X-Proofpoint-DLP: Gmail-Outbound X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.293,Aquarius:18.0.1121,Hydra:6.1.9,FMLib:17.12.100.49 definitions=2025-11-01_04,2025-10-29_03,2025-10-01_01 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk +1 from me for having TDE in-core or available as an extension The security auditors that I have worked with have been increasingly unwilling to actual evaluate the merits of an implementation or perhaps no longer have the knowledge or skills needed. This is a needed checkbox to allow PostgreSQL to be deployed in those environments. Regards, Ken