Antonin Houska <a...@cybertec.at> wrote: > Masahiko Sawada <sawada.m...@gmail.com> wrote: > > > Agreed. > > > > For the WAL encryption, I wonder if we can have a encryption key > > dedicated for WAL. Regardless of keys of tables and indexes all WAL > > are encrypted with the WAL key. During the recovery the startup > > process decrypts WAL and applies it, and then the table data will be > > encrypted with its table key when flushing. So we just control the > > scope of encryption object: WAL of tables and indexes etc or > > everything. > > My point of view is that different key usually means different user. The user > who can decrypt WAL can effectively see all the data, even though another user > put them (encrypted with another key) into tables. So in this case, different > keys don't really separate users in terms of data access.
Please ignore what I said here. You probably meant that the WAL is both encrypted and decrypted using the same (dedicated) key. -- Antonin Houska https://www.cybertec-postgresql.com
