Re: [ADMIN] Database Encryption (now required by law in Italy)

2004-06-10 Thread Silvana Di Martino
you - Alessandro Bottoni and Silvana Di Martino [EMAIL PROTECTED] [EMAIL PROTECTED] ---(end of broadcast)--- TIP 5: Have you checked our extensive FAQ? http://www.postgresql.org/docs/faqs/FAQ.html

Re: [ADMIN] pgcrypto and database encryption

2004-03-09 Thread Silvana Di Martino
e > > attention of the PostgreSQL developers with the intent to develop a > > standard set of reliable encrypted data types. I'm sure that performance > > would be hugely affected by > > Given that it's possible that the types might be an input function, an > output

Re: [ADMIN] Article on DB encryption

2004-03-08 Thread Silvana Di Martino
of a server. See you PS: Bruce, it's a real pleasure to meet you on the web. Your book on PostgreSQL is one of the most "chewed" of my collection. ------------- Alessandro Bottoni and Silvana Di Martino [EMAIL PROTECTED] [EMAIL PROTECTE

Re: [ADMIN] Database Encryption (now required by law in Italy)

2004-03-08 Thread Silvana Di Martino
Alle 17:29, lunedì 8 marzo 2004, Joe Conway ha scritto: > Silvana Di Martino wrote: > > Oracle has a built-in feature for encrypting/decrypting this password's > > password. > > Right, and this master password is only protected because Oracle is > closed source. It i

Re: [ADMIN] pgcrypto and database encryption

2004-03-08 Thread Silvana Di Martino
arison and any other basic operation. IMHO, this topic should be brought to the attention of the PostgreSQL developers with the intent to develop a standard set of reliable encrypted data types. I'm sure that performance would be hugely affected by encryption but, again, this is out of our reach:

Re: [ADMIN] Database Encryption (now required by law in Italy)

2004-03-08 Thread Silvana Di Martino
Alle 12:30, lunedì 8 marzo 2004, Peter Galbavy ha scritto: > Silvana Di Martino wrote: > > Oracle has a system similar to pgcrypto but more sophisticated. I do > > not know if it can use encrypted indexes, encrypted dates and > > encrypted times (it is likely but I did not t

Re: [ADMIN] Database Encryption (now required by law in Italy)

2004-03-08 Thread Silvana Di Martino
e only one here facing this problem. That's surprising, given the number of countries that have a law like the italian one and the wide diffusion of PostgreSQL. See you. --------- Alessandro Bottoni and Silvana Di Martino [EMAIL PROTECTED] [EMAIL PROTEC

[ADMIN] Article on DB encryption

2004-03-08 Thread Silvana Di Martino
e unencrypted data--even the keys to get at the data are encrypted. This solution can be implemented in any of the major databases, and Oracle provides a secure key generator as well as other tools to get you started." Have a nice reading. ------------- Ale

[ADMIN] HIPAA

2004-03-08 Thread Silvana Di Martino
ers and signal this (new and annoying) issue. Any comment? - Alessandro Bottoni and Silvana Di Martino [EMAIL PROTECTED] [EMAIL PROTECTED] ---(end of broadcast)--- TIP 1: subscribe and unsubscribe commands go to [EMAIL PROTECTED]

Re: [ADMIN] pgcrypto and database encryption

2004-03-08 Thread Silvana Di Martino
me a solution (that is: a PostgreSQL database encryption method I can actually use) and I will let you alone. See you. - Alessandro Bottoni and Silvana Di Martino [EMAIL PROTECTED] [EMAIL PROTECTED] ---(end of broadcast)--- TIP 7: don't forget to increase your free space map settings

Re: [ADMIN] pgcrypto and database encryption

2004-03-08 Thread Silvana Di Martino
e downtime requirements. The password should come from a human typing at the console (not our choice: law imposes it). Downtime will be affected: this is out of our control and must be accepted by our customers. Thanks for your comments. -

[ADMIN] pgcrypto and database encryption

2004-03-07 Thread Silvana Di Martino
EU pgsql-admins affected by this problem. --------- Alessandro Bottoni and Silvana Di Martino [EMAIL PROTECTED] [EMAIL PROTECTED] ---(end of broadcast)--- TIP 9: the planner will ignore your desire to choose an index scan if your joining column's datatypes do not match

Re: [ADMIN] Database Encryption (now required by law in Italy)

2004-03-07 Thread Silvana Di Martino
---------- Alessandro Bottoni and Silvana Di Martino [EMAIL PROTECTED] [EMAIL PROTECTED] ---(end of broadcast)--- TIP 3: if posting/reading through Usenet, please send an appropriate subscribe-nomail command to [EMAIL PROTECTED] so th

Re: [ADMIN] Database Encryption (now required by law in Italy)

2004-03-06 Thread Silvana Di Martino
ore power of what it actually need for his job, not even the root. Would not it be a better (safer and more manageable) world to live on? --------- Alessandro Bottoni and Silvana Di Martino [EMAIL PROTECTED] [EMAIL PROTECTED] ---(end of

Re: [ADMIN] How to do fast, reliable backups?

2004-03-06 Thread Silvana Di Martino
lement this mechanism yet. See you. --------- Alessandro Bottoni and Silvana Di Martino [EMAIL PROTECTED] [EMAIL PROTECTED] ---(end of broadcast)--- TIP 7: don't forget to increase your free space map settings

Re: [ADMIN] How to do fast, reliable backups?

2004-03-06 Thread Silvana Di Martino
tem. Test the restore system before using your program in a production environment. Good luck. - Alessandro Bottoni and Silvana Di Martino [EMAIL PROTECTED] [EMAIL PROTECTED] ---(end of broadcast)--- TIP 4: Don't 'kill -9' the postmaster

Re: [ADMIN] Database Encryption (now required by law in Italy)

2004-03-06 Thread Silvana Di Martino
Alle 21:29, venerdì 5 marzo 2004, Bruno Wolff III ha scritto: > On Fri, Mar 05, 2004 at 20:12:37 +, > > Silvana Di Martino <[EMAIL PROTECTED]> wrote: > > BTW: if you have a USA-based company and collect info regarding Italian > > people, you have to comply with thi

Re: [ADMIN] Database Encryption (now required by law in Italy)

2004-03-06 Thread Silvana Di Martino
do not have to trust me. Ask your company's lawyer about this. See you ------------- Alessandro Bottoni and Silvana Di Martino [EMAIL PROTECTED] [EMAIL PROTECTED] ---(end of broadcast)--- TIP 7: don't forget to increase your free space map settings

Re: [ADMIN] Database Encryption (now required by law in Italy)

2004-03-06 Thread Silvana Di Martino
ust a matter of computing resource and time. See you ------------- Alessandro Bottoni and Silvana Di Martino [EMAIL PROTECTED] [EMAIL PROTECTED] ---(end of broadcast)--- TIP 3: if posting/reading through Usenet, please send an appropri

Re: [ADMIN] Database Encryption (now required by law in Italy)

2004-03-05 Thread Silvana Di Martino
this sort of attack (although doesn't entirely unless > you can guarantee that the password server cannot be taken at the same > time) but also gives you a remote point of failure. Right. See you - Alessandro Bottoni and Silvana Di Martino [EMAIL

Re: [ADMIN] Database Encryption (now required by law in Italy)

2004-03-05 Thread Silvana Di Martino
fferent tasks. So, there is not any need to use the military scheme to enforce data security. See you - Alessandro Bottoni and Silvana Di Martino [EMAIL PROTECTED] [EMAIL PROTECTED] ---(end of broadcast)--- TIP

Re: [ADMIN] Database Encryption (now required by law in Italy)

2004-03-05 Thread Silvana Di Martino
ve to comply with it in a few years. See you - Alessandro Bottoni and Silvana Di Martino [EMAIL PROTECTED] [EMAIL PROTECTED] ---(end of broadcast)--- TIP 2: you can get off all lists at once with the unregist

Re: [ADMIN] Database Encryption (now required by law in Italy)

2004-03-05 Thread Silvana Di Martino
Alle 13:53, venerdì 5 marzo 2004, Mark Gibson ha scritto: > Silvana Di Martino wrote: > >Is there any (native/third party) tool for encrypting a PGSQL database on > > the disk? Is there any PGSQL option for encrypting data on the fly? > > Have a look in contrib/pgcrypto.

Re: [ADMIN] Database Encryption (now required by law in Italy)

2004-03-05 Thread Silvana Di Martino
ion. See you BTW: if you have a USA-based company and collect info regarding Italian people, you have to comply with this absurd Italian law. Funny, isn't it? - Alessandro Bottoni and Silvana Di Martino [EMAIL PROTECTED] [EMAIL PROTECTED]

Re: [ADMIN] Database Encryption (now required by law in Italy)

2004-03-05 Thread Silvana Di Martino
protection could push our beloved GPL RDBMS out of the market. See you --------- Alessandro Bottoni and Silvana Di Martino [EMAIL PROTECTED] [EMAIL PROTECTED] ---(end of broadcast)--- TIP 4: Don't 'kill -9' the postmaster

Re: [ADMIN] Database Encryption (now required by law in Italy)

2004-03-05 Thread Silvana Di Martino
f the moment, but this problem do deserves a standard solution. See you - Alessandro Bottoni and Silvana Di Martino [EMAIL PROTECTED] [EMAIL PROTECTED] ---(end of broadcast)--- TIP 7: don't forget to i

Re: [ADMIN] Database Encryption (now required by law in Italy)

2004-03-05 Thread Silvana Di Martino
database, > but implementing two-way encryption of database data just doesn't make > sense to me. Neither to me, actually, but it makes to our law-makers (Have you heard of Silvio Berlusconi?). See you --------- Alessandro Bottoni and Silvana Di Mar

Re: [ADMIN] Database Encryption (now required by law in Italy)

2004-03-05 Thread Silvana Di Martino
listen to the (encrypted/digitally signed) "Heartbeat" of a password server through the net to prevent this kind of attack. See you ------------- Alessandro Bottoni and Silvana Di Martino [EMAIL PROTECTED] [EMAIL PROTECTED] ---(end of

Re: [ADMIN] Database Encryption (now required by law in Italy)

2004-03-05 Thread Silvana Di Martino
ee you. --------- Alessandro Bottoni and Silvana Di Martino [EMAIL PROTECTED] [EMAIL PROTECTED] ---(end of broadcast)--- TIP 9: the planner will ignore your desire to choose an index scan if your joining column's datatypes do not match

Re: [ADMIN] Database Encryption (now required by law in Italy)

2004-03-05 Thread Silvana Di Martino
states that personal data have to be encrypted even when stored in a safe place like that. See you - Alessandro Bottoni and Silvana Di Martino [EMAIL PROTECTED] [EMAIL PROTECTED] ---(end of broadcast)--- TIP 7: don't forget to increase your free space map settings

Re: [ADMIN] Database Encryption (now required by law in Italy)

2004-03-05 Thread Silvana Di Martino
t tool that I do not have to implement by myself (both because I'm lazy and because I like standard tools.) See you ----- Alessandro Bottoni and Silvana Di Martino [EMAIL PROTECTED] [EMAIL PROTECTED] ---(end of broadcast)-

[ADMIN] Database Encryption (now required by law in Italy)

2004-03-05 Thread Silvana Di Martino
any thanks in advance for your attention. NOTE: the italian law on privacy ("Decreto Legge 196/03", Dicembre 2003) is available on the net: http://www.garanteprivacy.it http://www.interlex.it Of course, just in italian... - Alessandro Bottoni an