On Thu, Dec 20, 2007 at 03:35:42PM -0500, Merlin Moncure wrote: > > Key management is an issue but easily solved. Uber simple solution is > to create a designated table holding the key(s) and use classic > permissions to guard it. Any security expert worth the title would point and laugh at that suggestion. If the idea is that the contents have to be encrypted to protect them, then it is just not acceptable to have the encryption keys online. That's the sort of "security" that inevitably causes programs to get a reputation for ill-thought-out protections. A ---------------------------(end of broadcast)--------------------------- TIP 1: if posting/reading through Usenet, please send an appropriate subscribe-nomail command to majordomo@xxxxxxxxxxxxxx so that your message can get through to the mailing list cleanly