Re: Securing Postgres

Поиск
Список
Период
Сортировка
От Welty, Richard
Тема Re: Securing Postgres
Дата
Msg-id A209FE4DA934614CAF3F5BD8E5E14290B0DE26@ex2k.bankofamerica.com
обсуждение исходный текст
Ответ на Securing Postgres  (L van der Walt <mailing@lani.co.za>)
Список pgsql-general

L van der Walt wrote:
>Then, I might as well just leave the whole PostgreSQL DB and write my
>own mini DB with encrypted XML files.  I am sure someone must have an
>answer for me.

i think the answer is that windows is giving you a false sense of
security.

in an environment where you cannot trust the administrators, the problem
you wish to solve is, um, "difficult". suppose you encrypt the XML files,
where do you put the keys? to be secure, you'd have to prompt the users for
a key or a passphrase, and you wouldn't be able to store the key or
passphrase anywhere in plaintext, but to encrypt securely you'd need another
key or passphrase, and so circularity ensues.

is windows prompting for keys or passphrases in a secure manner? i doubt it.

richard

В списке pgsql-general по дате отправления:

Предыдущее
От: Lincoln Yeoh
Дата:
Сообщение: Re: Securing Postgres
Следующее
От: "codeWarrior"
Дата:
Сообщение: Re: query execution