Horton
Menu

Re: Enquiry about TDE with PgSQL

Christophe Pettus <xof@thebuild.com>

View thread
From: Christophe Pettus <xof@thebuild.com>
To: Adrian Klaver <adrian.klaver@aklaver.com>
Cc: Bruce Momjian <bruce@momjian.us>, Kai Wagner <kai.wagner@percona.com>, Laurenz Albe <laurenz.albe@cybertec.at>, Ron Johnson <ronljohnsonjr@gmail.com>, pgsql-general <pgsql-general@postgresql.org>
Date: 2025-10-31T17:04:35Z
Lists: pgsql-general 

> On Oct 31, 2025, at 08:21, Adrian Klaver <adrian.klaver@aklaver.com> wrote:
> Yeah, what I would like to know is how many of the data breaches actually grab directly from the storage versus getting it through the database or other software above the storage?

Essentially zero.

PCI, like a lot of data security standards, are a magpie's assemblage of things that the authors have heard about all of which sound "secure" to them.  However, since these particular magpies have machine guns (metaphorically) and can do serious damage to businesses, we must play along with the masquerade.