Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

PostgreSQL 14 Beta 1 Released

postgresql.org

Post reply on HN
Print view View original

11–14 of 14 posts

Re: PostgreSQL 14 Beta 1 Released

#11

Post by ants_a »

arcticfox wrote: post #3

Does anyone know if TDE has any chance of making it in to Postgres 14? My team needs to encrypt values in the database to satisfy some enterprise security requirements... Barring native TDE, does anyone have experience with Cossack Labs' Acra proxy? It seems to encrypt/ decrypt data coming in and out at a field level, which sounds slick, but I'm also concerned about maintenance and performance

Encrypting the volume the database is stored is pretty much equivalent in security offered to TDE and satisfies all of the security requirements that I have encountered.

For field level encryption you should implement it in the application layer.

Re: PostgreSQL 14 Beta 1 Released

#12

Post by et1337 »

atonse wrote: post #10
arcticfox wrote: post #3

Does anyone know if TDE has any chance of making it in to Postgres 14? My team needs to encrypt values in the database to satisfy some enterprise security requirements... Barring native TDE, does anyone have experience with Cossack Labs' Acra proxy? It seems to encrypt/ decrypt data coming in and out at a field level, which sounds slick, but I'm also concerned about maintenance and performance

I’m also curious about this and similar tools. It would be amazing if Hashicorp Vault just did this natively. (Functioned as a Postgres proxy)

StrongDM is a Postgres proxy, and we integrate with Hashicorp Vault. (I work there)

Re: PostgreSQL 14 Beta 1 Released

#13

Post by jeff-davis »

bionhoward wrote: post #5

Two features I'm excited about, aren't in this release, but are on the radar: 1. Incremental materialized view updates - enables efficient queries on denormalized views of normalized schema (because we don't need to rebuild a view for each update) ... Anybody know some good ways to do this right now? 2. Integration of openCypher / GQL stuff into SQL. Graphs and Sets make a lot of sense together and Apache AGE demonst…

"PL/Rust could be fun, too. I like the idea of using macros to generate lots of code, especially type definitions across multiple languages."

Can you explain what you mean here?

Re: PostgreSQL 14 Beta 1 Released

#14

Post by atonse »

et1337 wrote: post #12
atonse wrote: post #10

Earlier quoted context omitted.

I’m also curious about this and similar tools. It would be amazing if Hashicorp Vault just did this natively. (Functioned as a Postgres proxy)

StrongDM is a Postgres proxy, and we integrate with Hashicorp Vault. (I work there)

But it seems like StrongDM is more an identity proxy, rather than a proxy that transparently encrypts/decrypts data at the row level?
Post reply on HN