On Fri, Jul 19, 2019 at 01:59:41PM +0200, Tomas Vondra wrote: > On Fri, Jul 19, 2019 at 12:04:36PM +0200, Antonin Houska wrote: > > We can guarantee integrity and authenticity of backup, but that's a separate > > feature: someone may need this although it's o.k. for him to run the cluster > > unencrypted.
> Yes, I do agree with that. I think attempts to guarantee data authenticity > and/or integrity at the page level is mostly futile (replay attacks are an > example of why). IMHO we should consider that to be outside the threat > model TDE is expected to address. Yes, I think we can say that checksums _help_ detect unauthorized database changes, and usually detects database corruption, but it isn't a fully secure solution. -- Bruce Momjian <br...@momjian.us> http://momjian.us EnterpriseDB http://enterprisedb.com + As you are, so once was I. As I am, so you will be. + + Ancient Roman grave inscription +
