Greetings, * Tony Xu (tony.xu@xxxxxxxxxx) wrote: > The FAQ (copied below) mentioned that native transparent data encryption > might be included in 16. Is it fair to assume that it will support database > level encryption, that is, we can use two encryption keys for two databases > in the same server, respectively? How can one verify that? The current work to include TDE in PG isn't contemplating a per-database key option. What's the use-case for that? Why do you feel that you'd need two independent keys? Also, the general idea currently is that we'll have one key provided by the user which will be a KEK and then multiple DEKs (different ones for relation data vs. temporary data vs. the WAL). If you're interested in TDE in PG, we could certainly use more folks being involved and working to push it forward. Thanks, Stephen
Attachment:
signature.asc
Description: PGP signature
