On Mon, Oct 7, 2019 at 12:34:36PM -0400, Bruce Momjian wrote: > On Mon, Oct 7, 2019 at 12:30:37PM -0400, Robert Haas wrote: > > On Mon, Oct 7, 2019 at 11:48 AM Bruce Momjian <br...@momjian.us> wrote: > > > Well, I am starting with the things I _know_ need encrypting, and am > > > then waiting for others to tell me what to add. Cybertec has not > > > provided a list and reasons yet, that I have seen. This is why I > > > started this public thread, so we could get a list and agree on it. > > > > Well that's fine, but you could also open up the patch and have a look > > at it. Even if you just looked at which files it modifies, it would > > enable you to add some important things do your list. > > Uh, I am really then just importing what one group decided, which seems > unsafe. I think it needs a fresh look at all files.
Someone has written a list of all PGDATA files so its TDE status can be recorded: https://wiki.postgresql.org/wiki/Transparent_Data_Encryption#List_of_the_contains_of_user_data_for_PostgreSQL_files Feel free to update it. -- Bruce Momjian <br...@momjian.us> http://momjian.us EnterpriseDB http://enterprisedb.com + As you are, so once was I. As I am, so you will be. + + Ancient Roman grave inscription +