Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1my9Mc-0001Qn-I5 for pgsql-hackers@arkaria.postgresql.org; Fri, 17 Dec 2021 09:17:18 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1my9Mb-0005Cr-5t for pgsql-hackers@arkaria.postgresql.org; Fri, 17 Dec 2021 09:17:17 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1my9Ma-0005Ci-Qs for pgsql-hackers@lists.postgresql.org; Fri, 17 Dec 2021 09:17:16 +0000 Received: from out5-smtp.messagingengine.com ([66.111.4.29]) by makus.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1my9MX-0005Lo-ML for pgsql-hackers@postgresql.org; Fri, 17 Dec 2021 09:17:15 +0000 Received: from compute6.internal (compute6.nyi.internal [10.202.2.46]) by mailout.nyi.internal (Postfix) with ESMTP id C363A5C009A; Fri, 17 Dec 2021 04:17:11 -0500 (EST) Received: from mailfrontend2 ([10.202.2.163]) by compute6.internal (MEProxy); Fri, 17 Dec 2021 04:17:11 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender :x-sasl-enc; s=fm1; bh=ceTbiFUEBzy4Ajki2sDbtOq5VFci2YJrBgeZO9Ja2 kM=; b=IYh8yMGBZ8AlU022H92NEp9di3O9rmhYY+jspkQwWen0pYDmaZ9JtWfs5 ODv2MgMbB9FP7YwfPugKVi4K06hyMXzA9BP6Q/ewZizTU0C2m2S4Lo4E06tM7DM5 PsV8E/m5Aae87wxYrM7BCLdr58yUlZsyTvHNaoK6U1IssKplkHOQtI9jLxwceODJ bAZMkfe391UPPXozh3sefN+c/ZzR7T5xsW4aIUkjfFlYIyy0RUEtCmrlI/oUOIyC ZvcGWvraFoaU+kNAIZ89AjUIAPiJ2FmVUnq9w4RVEyEQAgMpllztfI7BY+DhS39A hYuqdww7qQLNT9YaBayumPVerPfZA== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvuddrleeigddtvdcutefuodetggdotefrodftvf curfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfghnecu uegrihhlohhuthemuceftddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmdenuc fjughrpefkffggfgfuvfhfhfgjtgfgsehtjeertddtfeejnecuhfhrohhmpefrvghtvghr ucfgihhsvghnthhrrghuthcuoehpvghtvghrrdgvihhsvghnthhrrghuthesvghnthgvrh hprhhishgvuggsrdgtohhmqeenucggtffrrghtthgvrhhnpeefjeegheetuefhveevudel ueeftdejteeiffetvdduhfdtieefgfeutedtveeggfenucevlhhushhtvghrufhiiigvpe dtnecurfgrrhgrmhepmhgrihhlfhhrohhmpehpvghtvghrrdgvihhsvghnthhrrghuthes vghnthgvrhhprhhishgvuggsrdgtohhm X-ME-Proxy: Received: by mail.messagingengine.com (Postfix) with ESMTPA; Fri, 17 Dec 2021 04:17:10 -0500 (EST) Message-ID: <018bb1c0-9607-90f1-71bd-32511d433630@enterprisedb.com> Date: Fri, 17 Dec 2021 10:17:09 +0100 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:91.0) Gecko/20100101 Thunderbird/91.3.2 Subject: Re: Transparent column encryption Content-Language: en-US To: Jacob Champion , "tomas.vondra@enterprisedb.com" , "pgsql-hackers@postgresql.org" References: <89157929-c2b6-817b-6025-8e4b2d89d88f@enterprisedb.com> <4fbcf5540633699fc3d81ffb59cb0ac884673a7c.camel@vmware.com> <1be3fd0e-959a-29e3-5f63-9c3dff9e7cb2@enterprisedb.com> <3c48f839-45f0-b85d-fd99-8693171f515e@enterprisedb.com> <4e00941c1028e6760da23e8f0ed42f2873bdf923.camel@vmware.com> <163b3295-7046-a12f-055e-55b68c594fb9@enterprisedb.com> <2738ecdfc23fdc149a91bea45cb235d09c453a3f.camel@vmware.com> From: Peter Eisentraut In-Reply-To: <2738ecdfc23fdc149a91bea45cb235d09c453a3f.camel@vmware.com> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk On 17.12.21 01:41, Jacob Champion wrote: > (And I think the client should be able to enforce encryption in > the first place, before I distract you too much with other stuff.) Yes, this is a useful point that I have added to my notes.