unencrypted master key #191
gurucubano
started this conversation in
Ideas
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
The documentation warns (correctly):
"Note: The File provided is intended for development and stores the keys unencrypted in the specified data file. 6. Set the master key for the database using the pg_tde_set_master_key function...."
We use PostgreSQL as the DBS for a complete Library Management System (some 150 installations in Germany). The password to access the PostgreSQL database (normally referenced as
PGPASSWORD
is also stored in a file in filesystem, but encrypted with BlowFish. All C-written application server, shell and Perl scripts know how to decrypt this on the flight.Something like this would be nice here too, and would not a big deal as pg_tde is written in C too.
Beta Was this translation helpful? Give feedback.
All reactions