Received: from malur.postgresql.org ([217.196.149.56])
	by arkaria.postgresql.org with esmtp (Exim 4.84_2)
	(envelope-from
 <pgsql-hackers-owner+M300348=pgsql-hackers-arkari@postgresql.org>)
	id 1bCTSl-0006JS-JP
	for pgsql-hackers@arkaria.postgresql.org; Mon, 13 Jun 2016 15:07:39 +0000
Received: from localhost ([127.0.0.1] helo=postgresql.org)
	by malur.postgresql.org with smtp (Exim 4.84_2)
	(envelope-from
 <pgsql-hackers-owner+M300348=pgsql-hackers-arkari@postgresql.org>)
	id 1bCTSl-0003zG-2G
	for pgsql-hackers@arkaria.postgresql.org; Mon, 13 Jun 2016 15:07:39 +0000
Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29])
	by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256)
	(Exim 4.84_2)
	(envelope-from <peter.eisentraut@2ndquadrant.com>)
	id 1bCTSj-0003yM-Th
	for pgsql-hackers@postgresql.org; Mon, 13 Jun 2016 15:07:37 +0000
Received: from out1-smtp.messagingengine.com ([66.111.4.25])
	by magus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256)
	(Exim 4.84_2)
	(envelope-from <peter.eisentraut@2ndquadrant.com>)
	id 1bCTSg-00007A-68
	for pgsql-hackers@postgresql.org; Mon, 13 Jun 2016 15:07:37 +0000
Received: from compute4.internal (compute4.nyi.internal [10.202.2.44])
	by mailout.nyi.internal (Postfix) with ESMTP id 9DCB020CB1;
	Mon, 13 Jun 2016 11:07:30 -0400 (EDT)
Received: from frontend1 ([10.202.2.160])
  by compute4.internal (MEProxy); Mon, 13 Jun 2016 11:07:30 -0400
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=
	messagingengine.com; h=content-transfer-encoding:content-type
	:date:from:in-reply-to:message-id:mime-version:references
	:subject:to:x-sasl-enc:x-sasl-enc; s=smtpout; bh=FtfPgXLH6K+0T4A
	oQEApiHvKDAc=; b=TpGiKcgS0tWogrFsXWmgXTMEmMPACEtUdC2t7SPCdOU1PQ8
	Wx3rEYpAOZMtT1pRn9gyK5GyOcC+fw7eNFPYkYtGhuN/GxNcAQ/eYQG9kAAAjDqI
	hZAbcDtC5xhTjMY9ihNLxsgfCuJI/mw1m3UYJAlo7xuUAYColr+XUXnC6gcg=
X-Sasl-enc: 1CbbClNeJKic0tBZ5gdAWkGMkU5Yeji0HN2DUtnB+BGw 1465830450
Received: from april.local (c-73-13-66-39.hsd1.pa.comcast.net [73.13.66.39])
	by mail.messagingengine.com (Postfix) with ESMTPA id 3994BF29FE;
	Mon, 13 Jun 2016 11:07:30 -0400 (EDT)
Subject: Re: WIP: Data at rest encryption
To: Ants Aasma <ants.aasma@gmail.com>,
 PostgreSQL-development <pgsql-hackers@postgresql.org>
References: 
 <CA+CSw_tb3bk5i7if6inZFc3yyf+9HEVNTy51QFBoeUk7UE_V=w@mail.gmail.com>
From: Peter Eisentraut <peter.eisentraut@2ndquadrant.com>
Organization: 2ndQuadrant
Message-ID: <06b6db11-3a3f-4d24-6f57-450f96ecda84@2ndquadrant.com>
Date: Mon, 13 Jun 2016 11:07:48 -0400
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:45.0)
 Gecko/20100101 Thunderbird/45.1.0
MIME-Version: 1.0
In-Reply-To: 
 <CA+CSw_tb3bk5i7if6inZFc3yyf+9HEVNTy51QFBoeUk7UE_V=w@mail.gmail.com>
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: 7bit
X-Pg-Spam-Score: -2.6 (--)
List-Archive: <http://archives.postgresql.org/pgsql-hackers>
List-Help: <mailto:majordomo@postgresql.org?body=help>
List-ID: <pgsql-hackers.postgresql.org>
List-Owner: <mailto:pgsql-hackers-owner@postgresql.org>
List-Post: <mailto:pgsql-hackers@postgresql.org>
List-Subscribe: <mailto:majordomo@postgresql.org?body=sub%20pgsql-hackers>
List-Unsubscribe: <mailto:majordomo@postgresql.org?body=unsub%20pgsql-hackers>
X-Mailing-List: pgsql-hackers
Precedence: bulk
Sender: pgsql-hackers-owner@postgresql.org

On 6/7/16 9:56 AM, Ants Aasma wrote:
> Similar things can be achieved with filesystem level encryption.
> However this is not always optimal for various reasons. One of the
> better reasons is the desire for HSM based encryption in a storage
> area network based setup.

Could you explain this in more detail?

-- 
Peter Eisentraut              http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services


-- 
Sent via pgsql-hackers mailing list (pgsql-hackers@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-hackers