From: Alvaro Herrera <alvherre@commandprompt.com>
To: Ron Johnson <ron.l.johnson@cox.net>
Cc: pgsql-general@postgresql.org
Subject: Re: Encrypted column
Date: Tue, 5 Jun 2007 09:59:51 -0400
Message-ID: <20070605135951.GB8140@alvh.no-ip.org> (raw)
In-Reply-To: <46656398.1090203@cox.net>
References: <46645B01.6070605@terra.com.br>
<4664983F.4010700@burntmail.com>
<46656398.1090203@cox.net>
Ron Johnson wrote:
> On 06/04/07 17:54, Guy Rouillier wrote:
> >Many people consider two-way encryption to be insecure; two-way
> >encryption means you can decrypt a value if you know the key, and it is
> >insecure because you usually have to put the key into the source code.
> >That means at least one person in your company, the programmer
> >maintaining the source code, can learn all of your users' passwords.
>
> Two-way encryption is needed for companies that store customer
> credit cards.
I thought that the advice for companies storing customer CCs was: don't.
--
Alvaro Herrera http://www.CommandPrompt.com/
The PostgreSQL Company - Command Prompt, Inc.
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-sql@postgresql.org
Cc: alvherre@commandprompt.com, ron.l.johnson@cox.net, pgsql-general@postgresql.org
Subject: Re: Encrypted column
In-Reply-To: <20070605135951.GB8140@alvh.no-ip.org>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox