Masahiko Sawada wrote: > Why do people want to just encrypt everything? For satisfying some > security compliance?
I'd say that TDE primarily protects you from masked ninjas that break into your server room and rip out the disks with your database on them. Or from people stealing your file system backups that you leave lying around in public. My guess is that this requirement almost always comes from security departments that don't know a lot about the typical security threats that databases face, or (worse) from lawmakers. And these are probably the people who will insist that *everything* is encrypted, even your commit log (unencrypted log? everyone can read the commits?). Yours, Laurenz Albe