From: Steve Atkins <steve@blighty.com>
To: PostgreSQL General <pgsql-general@postgresql.org>
Subject: Re: Encrypted column
Date: Tue, 5 Jun 2007 08:39:32 -0700
Message-ID: <71E4FE2F-6FC9-4EDB-89FF-69046C405363@blighty.com> (raw)
In-Reply-To: <466572F0.3070900@cox.net>
References: <46645B01.6070605@terra.com.br>
<4664983F.4010700@burntmail.com>
<46656398.1090203@cox.net>
<20070605135951.GB8140@alvh.no-ip.org>
<466572F0.3070900@cox.net>
On Jun 5, 2007, at 7:28 AM, Ron Johnson wrote:
> On 06/05/07 08:59, Alvaro Herrera wrote:
>> Ron Johnson wrote:
>>> On 06/04/07 17:54, Guy Rouillier wrote:
>>>> Many people consider two-way encryption to be insecure; two-way
>>>> encryption means you can decrypt a value if you know the key,
>>>> and it is insecure because you usually have to put the key into
>>>> the source code. That means at least one person in your company,
>>>> the programmer maintaining the source code, can learn all of
>>>> your users' passwords.
>>> Two-way encryption is needed for companies that store customer
>>> credit cards.
>> I thought that the advice for companies storing customer CCs was:
>> don't.
>
> Sometimes you "must".
>
> An example from my industry: transponder "toll tags" and toll
> roads. The customer pre-pays a certain amount based on expected
> usage, and every time he drives thru a plaza, his balance
> decreases. Once it drops to a certain threshold, more money needs
> to be added to the account.
>
> If he is a CASH/CHEK customer, a light at the lane flashes yellow
> and (depending on the Agency) a message pops up saying, "Balance
> low", so he drives over to the customer service center, stands in
> line and pays his cash.
>
> If he is a CC customer, the system (which I am DBA of) bills his
> card directly, saving the customer much time and effort.
Public key encryption can help here. Encrypt with the public key when
it goes into the database, keep the private key on a separate, well
protected system that's just used for recurring CC billing.
Cheers,
Steve
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-sql@postgresql.org
Cc: steve@blighty.com, pgsql-general@postgresql.org
Subject: Re: Encrypted column
In-Reply-To: <71E4FE2F-6FC9-4EDB-89FF-69046C405363@blighty.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox