Re: Enquiry about TDE with PgSQL

Bruce Momjian <bruce@momjian.us>

From: Bruce Momjian <bruce@momjian.us>

To: Álvaro Herrera <alvherre@kurilemu.de>

Cc: Christophe Pettus <xof@thebuild.com>, Adrian Klaver <adrian.klaver@aklaver.com>, Kai Wagner <kai.wagner@percona.com>, Laurenz Albe <laurenz.albe@cybertec.at>, Ron Johnson <ronljohnsonjr@gmail.com>, pgsql-general <pgsql-general@postgresql.org>

Date: 2025-10-31T18:22:22Z

Lists: pgsql-general

On Fri, Oct 31, 2025 at 06:33:54PM +0100, Álvaro Herrera wrote:
> On 2025-Oct-31, Bruce Momjian wrote:
> 
> > Yes, we have been avoiding the masquerade for years.  The question is
> > can we continue.  From the lack of discussion since April 1, 2025, it
> > seems the answer is yes.
> 
> Maybe, but I think the only reason for this is that some companies are
> implementing it locally in their forks or whatever.  I bet there are
> many prospective customers that we (the open source Postgres project)
> are not reaching because of lack of certifiability in this area.
> 
> Can we continue to ignore it?  My impression is that that strategy will
> continue to work, perhaps indefinitely.  Is it a good idea?  Of that I
> am not so sure.

Agreed.  Just to state the obvious, I have never heard of any Postgres
support company discouraging the community from implementing TDE.  In
fact, I have heard them strongly encourage it.

-- 
  Bruce Momjian  <bruce@momjian.us>        https://momjian.us
  EDB                                      https://enterprisedb.com

  Do not let urgent matters crowd out time for investment in the future.