Enhancing Security in PostgreSQL

on YouTube ↗32m

" summary

PostgreSQL security changes from Version 10 to 17 include concrete, actionable shifts: create on schema revoked by default (v15+) so non-owners need explicit GRANTs; column-level privileges added in v15; role inheritance for shared privileges added in v17; SCRAM-SHA-256 authentication enabled by setting password_encryption to scram-sha-256 (post-v10); LDAP over SSL (v11), GSSAPI encryption for on-the-wire protection (v12), client certificates (v14), direct TLS handshake (v17) and native incremental physical backups (v17) for safer restores.

AI-written summary · about

" chapters (14)

1. 0:00Introduction to PostgreSQL security
2. 1:39Public schema changes in PostgreSQL 15
3. 8:57Column-level security in PostgreSQL 15
4. 10:01Role inheritance in PostgreSQL 17
5. 15:21Authentication and encryption improvements
6. 18:37GSS API encryption in PostgreSQL 12
7. 20:26Password policies in PostgreSQL 13
8. 21:32SSL enhancements in PostgreSQL 14
9. 22:57Direct TLS handshake in PostgreSQL 17
10. 24:01Incremental backups in PostgreSQL 17
11. 27:54External authentication with OAuth
12. 28:58Performance impact of SSL encryption
13. 30:04SCRAM-SHA-256 vs SHA-256
14. 31:52Q&A session

" related talks

• 54mConfiguration and AuthenticationMichael Paquier · PGCon 2023
• 40mPostgreSQL Security for Application DevelopersSehrope Sarkuni · PostgresOpen Silicon Valley 2017
• 07mAll about Postgres securityIbrar Ahmed · Percona University Istanbul 2022
• 50mSecuring PostgreSQLChristophe Pettus · PGConf Silicon Valley 2016
• 28mFrom Dev to Prod: Securing Postgres the Right WaySakshi Nasha · POSETTE: An Event for Postgres 2026
• 50mPostgreSQL Security. How Do We Think?Masanori Oyama · FOSSASIA Summit 2017
• 55mGet Your Insecure PostgreSQL Passwords to SCRAM!Jonathan S. Katz · PGConf NYC 2021
• 27mFor Your Eyes Only: Roles, Privileges, and Security in PostgreSQLRyan Booz · Citus Con: An Event for Postgres 2023