Re: [GENERAL] PG and database encryption

2017-08-23 Thread Stephen Frost
Greetings, * Scott Marlowe (scott.marl...@gmail.com) wrote: > On Tue, Aug 22, 2017 at 3:13 PM, PT wrote: > > On Tue, 22 Aug 2017 12:48:13 -0700 (MST) > > rakeshkumar464 wrote: > >> We have a requirement to encrypt the entire database. What is the best > >> tool > >> to accomplish this. Our pri

Re: [GENERAL] PG and database encryption

2017-08-22 Thread Condor
On 22-08-2017 22:48, rakeshkumar464 wrote: We have a requirement to encrypt the entire database. What is the best tool to accomplish this. Our primary goal is that it should be transparent to the application, with no change in the application, as compared to un-encrypted database. Reading abou

Re: [GENERAL] PG and database encryption

2017-08-22 Thread Scott Marlowe
On Tue, Aug 22, 2017 at 3:13 PM, PT wrote: > On Tue, 22 Aug 2017 12:48:13 -0700 (MST) > rakeshkumar464 wrote: > >> We have a requirement to encrypt the entire database. What is the best tool >> to accomplish this. Our primary goal is that it should be transparent to the >> application, with no c

Re: [GENERAL] PG and database encryption

2017-08-22 Thread PT
On Tue, 22 Aug 2017 12:48:13 -0700 (MST) rakeshkumar464 wrote: > We have a requirement to encrypt the entire database. What is the best tool > to accomplish this. Our primary goal is that it should be transparent to the > application, with no change in the application, as compared to un-encrypte

Re: [GENERAL] PG and database encryption

2017-08-22 Thread John McKown
On Tue, Aug 22, 2017 at 3:27 PM, rakeshkumar464 wrote: > Thanks John and JD. > > John: Are you telling that the backup of a database has no protection? If you use LUKS to encrypt a filesystem and then copy any file data on that filesystem to another file on an unencrypted filesystem, then the cop

Re: [GENERAL] PG and database encryption

2017-08-22 Thread rakeshkumar464
Thanks John and JD. John: Are you telling that the backup of a database has no protection? -- View this message in context: http://www.postgresql-archive.org/PG-and-database-encryption-tp5979618p5979624.html Sent from the PostgreSQL - general mailing list archive at Nabble.com. -- Sent vi

Re: [GENERAL] PG and database encryption

2017-08-22 Thread Paul Jungwirth
On 08/22/2017 01:08 PM, John McKown wrote: On Tue, Aug 22, 2017 at 2:48 PM, rakeshkumar464 wrote: We have a requirement to encrypt the entire database. Personally, what I'd do (and actually do at work) is to us LUKS. I second that, although I'll add that if you're on AWS you can also use e

Re: [GENERAL] PG and database encryption

2017-08-22 Thread Ron Johnson
On 08/22/2017 02:55 PM, Joshua D. Drake wrote: On 08/22/2017 12:48 PM, rakeshkumar464 wrote: We have a requirement to encrypt the entire database. What is the best tool to accomplish this. Our primary goal is that it should be transparent to the application, with no change in the application, a

Re: [GENERAL] PG and database encryption

2017-08-22 Thread John McKown
On Tue, Aug 22, 2017 at 2:48 PM, rakeshkumar464 wrote: > We have a requirement to encrypt the entire database. What is the best tool > to accomplish this. Our primary goal is that it should be transparent to the > application, with no change in the application, as compared to un-encrypted > datab

Re: [GENERAL] PG and database encryption

2017-08-22 Thread Joshua D. Drake
On 08/22/2017 12:48 PM, rakeshkumar464 wrote: We have a requirement to encrypt the entire database. What is the best tool to accomplish this. Our primary goal is that it should be transparent to the application, with no change in the application, as compared to un-encrypted database. Reading abo

[GENERAL] PG and database encryption

2017-08-22 Thread rakeshkumar464
We have a requirement to encrypt the entire database. What is the best tool to accomplish this. Our primary goal is that it should be transparent to the application, with no change in the application, as compared to un-encrypted database. Reading about pgcrypto module, it seems it is good for few