Date: Thu, 28 Jan 2021 10:32:13 -0500
From: Bruce Momjian <bruce@momjian.us>
To: Tom Lane <tgl@sss.pgh.pa.us>
Cc: Martin Goodson <kaemaril@googlemail.com>,
	"pgsql-novice@lists.postgresql.org" <pgsql-novice@lists.postgresql.org>
Subject: Re: Transparent Data Encryption in PostgreSQL?
Message-ID: <20210128153213.GC24155@momjian.us>
References: <e30e3100-3aab-e1a9-e517-769b4f4c12a7@googlemail.com>
 <2545980.1611847051@sss.pgh.pa.us>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <2545980.1611847051@sss.pgh.pa.us>
User-Agent: Mutt/1.10.1 (2018-07-13)
Precedence: bulk

On Thu, Jan 28, 2021 at 10:17:31AM -0500, Tom Lane wrote:
> Martin Goodson <kaemaril@googlemail.com> writes:
> > ... but a colleague at work is adamant that PostgreSQL has had TDE since 
> > 2019.
> 
> There is at least one fork with TDE, which maybe is what your colleague is
> thinking of, but it doesn't exist in the community code today.  Various
> people are interested in merging the feature.  At this point I'd lay
> odds against it being ready for v14, but perhaps it will happen for v15.

Yeah, we could get the key management into PG 14, but it wouldn't do
anything, so it would have to be hidden so it didn't confuse people, so
what's the point of adding it now?  Also, I don't know anyone who is
currently working on the data encryption stage, which is the next step.

-- 
  Bruce Momjian  <bruce@momjian.us>        https://momjian.us
  EDB                                      https://enterprisedb.com

  The usefulness of a cup is in its emptiness, Bruce Lee