From: Chris Travers <chris@travelamericas.com>
To: Premsun Choltanwanich <Premsun@nsasia.co.th>
To: pgsql-sql <pgsql-sql@postgresql.org>
Subject: Re: How to secure PostgreSQL Data for distribute?
Date: Wed, 17 Aug 2005 22:26:59 -0700
Message-ID: <43041C23.6050908@travelamericas.com> (raw)
In-Reply-To: <s3045b5b.070@mail.nsasia.co.th>
References: <s3045b5b.070@mail.nsasia.co.th>
Premsun Choltanwanich wrote:
> Dear All,
>
> I need to distribute my application that use PostgreSQL as
> database to my customer. But I still have some questions in my mind on
> database security. I understand that everybody who get my application
> database will be have a full control permission on my database in case
> that PostgreSQL already installed on their computer and they are an
> administrator on PostgreSQL. So that mean data, structure and any
> ideas contain in database will does not secure on this point. Is my
> understanding correct?
>
> What is the good way to make it all secure? Please advise.
If your customer can access the data, they can access the data. If they
have control over the system, they can access the system.
I guess you could build some sort of encryption into your client, but
that seems pretty easy to circumvent.
The short answer is that there is no good way to do this. If you are
worried about this, the technology isn't going to save you. No
technology will save you. Instead, I would highly suggest discussing
the matter with an attourney and see if there is a legal remedy that
might provide adequate protection.
Best Wishes,
Chris Travers
Metatron Technology Consulting
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-sql@postgresql.org
Cc: chris@travelamericas.com, Premsun@nsasia.co.th
Subject: Re: How to secure PostgreSQL Data for distribute?
In-Reply-To: <43041C23.6050908@travelamericas.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox