Re: TDE

Chuck wrote:
> I just read an oracle white paper on transparent data encryption in
> 10gR2. It states that decryption occurs at the SQL layer. Doesn't that
> mean that the data will be decrypted *before* it's transmitted over the
> network to a client? I would think that defeats part of the goal of
> encryption if it's not done at the client. Am I misunderstanding something?
>
> Quoted from the white paper...
>
> "TDE encrypts data before it's written to disk and decrypts data before
> it is returned to the application. The encryption and decryption process
> is performed at the SQL layer, completely transparent to applications
> and users."

Thanks all who replied. I guess if I want to encrypt the data in transit I'll either need to pay for the advanced networking option, or use something like stunnel or ssh port forwarding. Received on Fri Dec 19 2008 - 16:08:12 CST