830 karma · joined May 3, 2022
You want the encryption at rest. For that you have 3 Options:
1. Encryption in the application.
2. Use of pgcrypto as documented.
3. Encryption of the partition where postgres stores the data via LUKS or similar.
For 1. and 2. it means that indices for encrypted columns become useless and are only a waste of cpu time.
2. has the problem of transitting the key at the start of the connection, so it needs to be encrypted(tls encryption).
Its a bit of an fault with the documentation since it mixes the two types of encryption up.
2. + 4. It depends
3. If you plan to go to the us while Trump and his chronies are in an position of power, then the best way to scrub them is not to post it.
5. See 1. if you don't disclose all, they can pull the lie on a form card