Search Postgresql Archives

Re: Securing Postgres

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 




L van der Walt wrote:
>Then, I might as well just leave the whole PostgreSQL DB and write my 
>own mini DB with encrypted XML files.  I am sure someone must have an 
>answer for me.

i think the answer is that windows is giving you a false sense of
security.

in an environment where you cannot trust the administrators, the problem
you wish to solve is, um, "difficult". suppose you encrypt the XML files,
where do you put the keys? to be secure, you'd have to prompt the users for
a key or a passphrase, and you wouldn't be able to store the key or
passphrase anywhere in plaintext, but to encrypt securely you'd need another
key or passphrase, and so circularity ensues.

is windows prompting for keys or passphrases in a secure manner? i doubt it.

richard

---------------------------(end of broadcast)---------------------------
TIP 1: if posting/reading through Usenet, please send an appropriate
       subscribe-nomail command to majordomo@xxxxxxxxxxxxxx so that your
       message can get through to the mailing list cleanly

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Postgresql Jobs]     [Postgresql Admin]     [Postgresql Performance]     [Linux Clusters]     [PHP Home]     [PHP on Windows]     [Kernel Newbies]     [PHP Classes]     [PHP Books]     [PHP Databases]     [Postgresql & PHP]     [Yosemite]
  Powered by Linux