public inbox for [email protected]
help / color / mirror / Atom feedFrom: Bruce Momjian <[email protected]>
To: Laurenz Albe <[email protected]>
Cc: Kai Wagner <[email protected]>
Cc: Chris Travers <[email protected]>
Cc: Christophe Pettus <[email protected]>
Cc: Clay Jackson (cjackson) <[email protected]>
Cc: pgsql-general <[email protected]>
Cc: Ron Johnson <[email protected]>
Subject: Re: Enquiry about TDE with PgSQL
Date: Mon, 3 Nov 2025 21:05:54 -0500
Message-ID: <[email protected]> (raw)
In-Reply-To: <[email protected]>
References: <[email protected]>
<[email protected]>
<CO1PR19MB4984B665A5F9F38A5E0FB5969BF9A@CO1PR19MB4984.namprd19.prod.outlook.com>
<[email protected]>
<CAKt_ZfuwPgG_nJHp6S=8k_+NdA6Op7hE0z7+s4-HuBqr1cnwsg@mail.gmail.com>
<CAG0qCNjd2m9Ej1ZEwuCCkgsqJz0vnso3ZFwjKCxzwUfnfu=SNw@mail.gmail.com>
<[email protected]>
<CAG0qCNgV+Ra72vTvCoTZqn7KUUsXvp3N=ZUgACgMTDDPt8WTkA@mail.gmail.com>
<[email protected]>
<[email protected]>
On Mon, Nov 3, 2025 at 07:42:06PM +0100, Laurenz Albe wrote:
> On Mon, 2025-11-03 at 11:56 -0500, Bruce Momjian wrote:
> > The problem with the Percona extension is it seems like it was developed
> > mostly/all by Percona employees, meaning development was driven/steered
> > by Percona, and there was insufficient feedback from the community for
> > it to be polished enough to be a general community solution.
>
> Reading a Percona blog, it looks like you need a modified server to get
> to encrypt WAL, and they probably have no support for encrypting
> temporary files. So I'd say that TDE can probably not be a pure extension.
> Perhaps somebody from Percona can confirm.
Yes, the server has to be modified because the hooks they need don't
exist in the community source code. They also have encryption control
on the table level, which I frankly think will never work long-term
because the storage API doesn't have enough table-level detail, so I
think they are considering tablespace-level or cluster-level encryption.
> But I don't think it's a shortage of implementations for TDE that is the
> problem.
>
> Since you say that encrypting the temp files is the biggest hurdle for
> community acceptance, what about a first version that does not encrypt
> temp files? For one, that will be good for encrypted backups (which is
> one of the good use cases for TDE), and then you could argue that temp
> files are not data *at rest*, so data-at-rest-encryption does not apply
> to them. Rome wasn't built in a day, and neither were parallel query
> or declarative partitioning.
Uh, people will say that if the solution is not 100% secure in its
coverage, it is much less useful and therefore not worth it.
--
Bruce Momjian <[email protected]> https://momjian.us
EDB https://enterprisedb.com
Do not let urgent matters crowd out time for investment in the future.
view thread (7+ messages) latest in thread
reply
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: [email protected]
Cc: [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected]
Subject: Re: Enquiry about TDE with PgSQL
In-Reply-To: <[email protected]>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox