Subject | Re: [firebird-support] Re: Encryption and changing laws |
---|---|
Author | willy.bojit@btinternet.com |
Post date | 2010-03-06T21:14:23Z |
--- On Thu, 4/3/10, Ed Dressel <eddressel@...> wrote:
I have been doing this for 5 years with (my) encryption/decryption built into the client.
>> when you ask this question?Financial requirements are that the data can only be read by appropriate people and the system DBA is not (usually) one of them. The DBA can access the data using any tools available, but must only see encrypted values.
>I have read that before, and while I understand it, it comes across academic (a view from the classroom) verses reality (a view from the trenches). I live in the trenches.
I have been doing this for 5 years with (my) encryption/decryption built into the client.
>To put it in a nutshell: there are reasons other database systems support encryption at the database level.Database level encryption is unlikely to be adequate, it is user encryption required.
>Ed Dressel