can I just encrypt tables? what about the app?

2016-02-29 Thread lejeczek
hi everybody a novice type of question - having a php + mysql, can one just encrypt (internally in mysql) tables and php will be fine? If not, would it be easy to re-code php to work with this new, internal encryption? thanks. -- MySQL General Mailing List For list archives: http://lists.mys

Re: can I just encrypt tables? what about the app?

2016-02-29 Thread Steven Siebert
Simple answer is no. What are you trying to accomplish? S On Mon, Feb 29, 2016 at 8:31 AM, lejeczek wrote: > hi everybody > > a novice type of question - having a php + mysql, can one just encrypt > (internally in mysql) tables and php will be fine? > If not, would it be easy to re-code php to

Re: can I just encrypt tables? what about the app?

2016-02-29 Thread lejeczek
On 29/02/16 14:38, Steven Siebert wrote: Simple answer is no. What are you trying to accomplish? I was hoping that with this new feature (google's) where mysql itself, internally uses keys to encrypt/decrypt tables or tablespaces I could just secure data, simply. Chance is I don't quite get th

Re: can I just encrypt tables? what about the app?

2016-02-29 Thread Jesper Wisborg Krogh
Hi Lejeczek, On 1/03/2016 00:31, lejeczek wrote: hi everybody a novice type of question - having a php + mysql, can one just encrypt (internally in mysql) tables and php will be fine? If not, would it be easy to re-code php to work with this new, internal encryption? Starting with MysQL 5.7

Re: can I just encrypt tables? what about the app?

2016-02-29 Thread Reindl Harald
Am 29.02.2016 um 20:07 schrieb Jesper Wisborg Krogh: Hi Lejeczek, On 1/03/2016 00:31, lejeczek wrote: hi everybody a novice type of question - having a php + mysql, can one just encrypt (internally in mysql) tables and php will be fine? If not, would it be easy to re-code php to work with th

Re: can I just encrypt tables? what about the app?

2016-02-29 Thread shawn l.green
Hi Reindl, On 2/29/2016 2:16 PM, Reindl Harald wrote: Am 29.02.2016 um 20:07 schrieb Jesper Wisborg Krogh: Hi Lejeczek, On 1/03/2016 00:31, lejeczek wrote: hi everybody a novice type of question - having a php + mysql, can one just encrypt (internally in mysql) tables and php will be fine?

Re: can I just encrypt tables? what about the app?

2016-02-29 Thread Reindl Harald
Am 29.02.2016 um 20:30 schrieb shawn l.green: Hi Reindl, On 2/29/2016 2:16 PM, Reindl Harald wrote: Am 29.02.2016 um 20:07 schrieb Jesper Wisborg Krogh: Hi Lejeczek, On 1/03/2016 00:31, lejeczek wrote: hi everybody a novice type of question - having a php + mysql, can one just encrypt (

Re: can I just encrypt tables? what about the app?

2016-02-29 Thread Gary Smith
On 29/02/2016 19:50, Reindl Harald wrote: cryptsetup/luks can achieve that way better Only to a degree. Once the disk is unencrypted, you've got access to the filesystem. If you've got physical access to the machine, then anything which gives you console access gives you (potentially) access

Re: can I just encrypt tables? what about the app?

2016-02-29 Thread Gary Smith
On 29/02/2016 19:54, Gary Smith wrote: However, if TDE is employed, then you've got another significant obstacle to overcome: The data is only encrypted (aiui) once it's in memory. Apologies, that should read "unencrypted (aiui) once it's in memory" Gary -- MySQL General Mailing List For list

Re: can I just encrypt tables? what about the app?

2016-02-29 Thread Reindl Harald
Am 29.02.2016 um 20:54 schrieb Gary Smith: On 29/02/2016 19:50, Reindl Harald wrote: cryptsetup/luks can achieve that way better Only to a degree. no - not only to a degree - when the question is "not store anything unencrypted on the disk" the is no degree, but or if Once the disk is

Re: can I just encrypt tables? what about the app?

2016-02-29 Thread shawn l.green
On 2/29/2016 3:13 PM, Reindl Harald wrote: Am 29.02.2016 um 20:54 schrieb Gary Smith: On 29/02/2016 19:50, Reindl Harald wrote: cryptsetup/luks can achieve that way better Only to a degree. no - not only to a degree - when the question is "not store anything unencrypted on the disk" th

Re: can I just encrypt tables? what about the app?

2016-03-01 Thread lejeczek
On 29/02/16 21:35, shawn l.green wrote: On 2/29/2016 3:13 PM, Reindl Harald wrote: Am 29.02.2016 um 20:54 schrieb Gary Smith: On 29/02/2016 19:50, Reindl Harald wrote: cryptsetup/luks can achieve that way better Only to a degree. no - not only to a degree - when the question is "not

Re: can I just encrypt tables? what about the app?

2016-03-01 Thread shawn l.green
On 3/1/2016 6:26 PM, lejeczek wrote: On 29/02/16 21:35, shawn l.green wrote: On 2/29/2016 3:13 PM, Reindl Harald wrote: Am 29.02.2016 um 20:54 schrieb Gary Smith: On 29/02/2016 19:50, Reindl Harald wrote: cryptsetup/luks can achieve that way better Only to a degree. no - not only

Re: can I just encrypt tables? what about the app?

2016-03-03 Thread lejeczek
On 02/03/16 00:51, shawn l.green wrote: On 3/1/2016 6:26 PM, lejeczek wrote: On 29/02/16 21:35, shawn l.green wrote: On 2/29/2016 3:13 PM, Reindl Harald wrote: Am 29.02.2016 um 20:54 schrieb Gary Smith: On 29/02/2016 19:50, Reindl Harald wrote: cryptsetup/luks can achieve that way b

Re: can I just encrypt tables? what about the app?

2016-03-03 Thread Reindl Harald
Am 03.03.2016 um 16:40 schrieb lejeczek: how to backup in a way that this in-database-encryption will be taken advantage of? does any of present backup solutions can do it? many thanks think once again what "transparent encryption" means the most effective backup is anyways running slave con

Re: can I just encrypt tables? what about the app?

2016-03-03 Thread shawn l.green
On 3/3/2016 10:40 AM, lejeczek wrote: On 02/03/16 00:51, shawn l.green wrote: On 3/1/2016 6:26 PM, lejeczek wrote: On 29/02/16 21:35, shawn l.green wrote: On 2/29/2016 3:13 PM, Reindl Harald wrote: Am 29.02.2016 um 20:54 schrieb Gary Smith: On 29/02/2016 19:50, Reindl Harald wrote:

Re: can I just encrypt tables? what about the app?

2016-03-06 Thread lejeczek
@harald, sure. @shawn, you say FTWRL is very important, tools that backup to text files for now - do those follow this principle? mysqldump eg. does it do FTWRL ? (I'm reading man pages but either I've gone blind or it's not there) On 03/03/16 16:02, shawn l.green wrote: On 3/3/2016 10:40