Horton
Menu

Re: Enquiry about TDE with PgSQL

Christophe Pettus <xof@thebuild.com>

View thread
From: Christophe Pettus <xof@thebuild.com>
To: Bruce Momjian <bruce@momjian.us>
Cc: pgsql-general <pgsql-general@postgresql.org>, Kai Wagner <kai.wagner@percona.com>, Laurenz Albe <laurenz.albe@cybertec.at>, Ron Johnson <ronljohnsonjr@gmail.com>
Date: 2025-11-01T01:32:17Z
Lists: pgsql-general 

> On Oct 31, 2025, at 17:21, Bruce Momjian <bruce@momjian.us> wrote:
> 
> I think column-level encryption, on the client side, actually does
> improve security and is preferable to file system level TDE, and I think
> many here feel the same way.

Absolutely.  Unfortunately, too many IT security policies are basically a grab-bag of things that someone has read that all claimed to be "best practice," and the degree to which they can be educated on the topic is variable.