Re:Encrypting Postgres Data at Rest in Kubernetes
by exitheone on Sunday October 31, 2021 @12:51PM
(#29058317)
But that is exactly the point. You want to ensure that disks later sold by your cloud provider do not contain your data in plain. That's the whole point with encryption at rest. It's not supposed to protect you against an attacker with root access to your server.
[ Parent
| on HN ]
Re:Encrypting Postgres Data at Rest in Kubernetes
by yashap on Sunday October 31, 2021 @01:41PM
(#29058732)
A good, fairly recent example from the city I live in, of hard drives being sold that were (accidentally) absolutely chock full of unencrypted customer PII: https://www.google.com/amp/s/globalnews.ca/news/4476625/ncix...
Re:Encrypting Postgres Data at Rest in Kubernetes
by jeffbee on Sunday October 31, 2021 @01:09PM
(#29058452)
But encryption at rest does protect you from insider or attacker access with full privileges on the servers where the data is stored. The data would necessarily be visible to a root user on the system where the data is being decrypted by an application, but that's not necessarily the same node.