Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dLFtj-0000XJ-C7 for pgsql-hackers@arkaria.postgresql.org; Wed, 14 Jun 2017 21:32:19 +0000 Received: from localhost ([127.0.0.1] helo=postgresql.org) by malur.postgresql.org with smtp (Exim 4.84_2) (envelope-from ) id 1dLFth-0004nB-H3 for pgsql-hackers@arkaria.postgresql.org; Wed, 14 Jun 2017 21:32:17 +0000 Received: from makus.postgresql.org ([2001:4800:1501:1::229]) by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1dLFtf-0004mz-M8 for pgsql-hackers@postgresql.org; Wed, 14 Jun 2017 21:32:15 +0000 Received: from out4-smtp.messagingengine.com ([66.111.4.28]) by makus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1dLFtY-0006FD-Re for pgsql-hackers@postgresql.org; Wed, 14 Jun 2017 21:32:14 +0000 Received: from compute7.internal (compute7.nyi.internal [10.202.2.47]) by mailout.nyi.internal (Postfix) with ESMTP id 3048820B1C; Wed, 14 Jun 2017 17:32:07 -0400 (EDT) Received: from frontend1 ([10.202.2.160]) by compute7.internal (MEProxy); Wed, 14 Jun 2017 17:32:07 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-me-sender:x-me-sender:x-sasl-enc:x-sasl-enc; s= fm1; bh=FuJmP3dmIR8IrtuBH/REDede1yeIdrpnqlOZqcC9SgY=; b=orcdBpzi paDVQ6D7hVyXE3HfzG4rUq7/DzpU1ohRoM1aUahfFrpqDR3qw/Q5VqN8pd19Fogl CP5f0xZAn8P1zm+4UiFH/hz0WvFuQYFSuL+Uc4CPjfBWeczKKwSOMIwzHqBsdvPO ob56N28kIP5QGesLKO4ZzUa8NF9DWYwbyUlTxm5e33SkeIy50UaRWUgSLdxv5p/q xEIJ5sHwGrgPhtZWFoWp63Ll4DDDqjf3mZjIdh9R1wAZYpOA9p2aHqgDNC2OCj4g 4kmLtR9qauKXjWuK1IvsrcL3UX5cOyC4NVcD9wo6jp8FK/TXZkuAlbOPBsWdOfpl loECldvY/WaJXg== X-ME-Sender: X-Sasl-enc: XYvVpn+KYqTsTHnM3wIdcIvXXtGOcc2oII46nCS9gBzp 1497475926 Received: from april.local (c-73-13-66-39.hsd1.pa.comcast.net [73.13.66.39]) by mail.messagingengine.com (Postfix) with ESMTPA id D7B4C7E926; Wed, 14 Jun 2017 17:32:06 -0400 (EDT) Subject: Re: WIP: Data at rest encryption To: Aleksander Alekseev References: <06b6db11-3a3f-4d24-6f57-450f96ecda84@2ndquadrant.com> <20170614090426.GA7249@e733.localdomain> Cc: Ants Aasma , Robert Haas , PostgreSQL-development From: Peter Eisentraut Organization: 2ndQuadrant Message-ID: Date: Wed, 14 Jun 2017 17:32:06 -0400 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:52.0) Gecko/20100101 Thunderbird/52.1.1 MIME-Version: 1.0 In-Reply-To: <20170614090426.GA7249@e733.localdomain> Content-Type: text/plain; charset=windows-1252 Content-Language: en-US Content-Transfer-Encoding: 7bit List-Archive: List-Help: List-ID: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: X-Mailing-List: pgsql-hackers Precedence: bulk Sender: pgsql-hackers-owner@postgresql.org On 6/14/17 05:04, Aleksander Alekseev wrote: > A few companies that hired system administrators that are too > lazy to read two or three man pages is not a reason to re-implement file > system encryption (or compression, or mirroring if that matters) in any > open source RDBMS. To be fair, we did implement our own compression (TOAST) and mirroring (compared to, say, DRBD) because there were clear advantages in simplicity and performance. Checksumming is another area where we moved forward in spite of arguments that the file system should do it. So we will need to see the whole picture. -- Peter Eisentraut http://www.2ndQuadrant.com/ PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services -- Sent via pgsql-hackers mailing list (pgsql-hackers@postgresql.org) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-hackers