Date: Mon, 6 Nov 2023 11:04:04 -0500
From: Bruce Momjian <bruce@momjian.us>
To: Andres Freund <andres@anarazel.de>
Cc: David Christensen <david.christensen@crunchydata.com>,
	vignesh C <vignesh21@gmail.com>,
	Aleksander Alekseev <aleksander@timescale.com>,
	PostgreSQL-development <pgsql-hackers@postgresql.org>,
	Stephen Frost <sfrost@snowman.net>
Subject: Re: Moving forward with TDE [PATCH v3]
Message-ID: <ZUkOdLVSv9QZJIFo@momjian.us>
References: <CAOxo6XJh95xPOpvTxuP_kiGRs8eHcaNrmy3kkzWrzWxvyVkKkQ@mail.gmail.com>
 <CAJ7c6TMJGYGkgb7RKvwj7UkfLQ-TEVJ98_bz=rZpnQnjcD5CRA@mail.gmail.com>
 <CAOxo6XLmZGvzgeEttHSJfHKQrY-rWk0xyK-JFcVe9qT4DbBf_Q@mail.gmail.com>
 <CALDaNm1Mmv3OSX8cG7iptFAx9kc28Nk8FCxHrFumtksgQ8tMMg@mail.gmail.com>
 <CAOxo6XLac9KL7UrfQr5+xfKgrSa==F_AghNbUkTA8ivYiYvjvQ@mail.gmail.com>
 <20231103023228.gz32vjx67jwzfh6h@alap3.anarazel.de>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20231103023228.gz32vjx67jwzfh6h@alap3.anarazel.de>
Archived-At: <https://www.postgresql.org/message-id/ZUkOdLVSv9QZJIFo%40momjian.us>
Precedence: bulk

On Thu, Nov  2, 2023 at 07:32:28PM -0700, Andres Freund wrote:
> On 2023-10-31 16:23:17 -0500, David Christensen wrote:
> > +Implementation
> > +--------------
> > +
> > +To enable cluster file encryption, the initdb option
> > +--cluster-key-command must be used, which specifies a command to
> > +retrieve the KEK.
> 
> FWIW, I think "cluster file encryption" is somewhat ambiguous. That could also
> mean encrypting on the file system level or such.

We could call it:

*  cluster data file encryption
*  cluster data encryption
*  database cluster encryption

-- 
  Bruce Momjian  <bruce@momjian.us>        https://momjian.us
  EDB                                      https://enterprisedb.com

  Only you can decide what is important to you.