Re: ADO.NET security in Windows App?

From: Dominick Baier [DevelopMentor] (dbaier_at_pleasepleasenospamdevelop.com)
Date: 06/28/05


Date: Tue, 28 Jun 2005 02:33:52 -0700

Hello Rob,

SQL communication is clear text. This includes the initial password in the
connection string as well as all data you send between client/server.

You have two options if you want to secure the data

- IPSec tunnel between the two parties
- Enable SSL in SQL Server

---------------------------------------
Dominick Baier - DevelopMentor
http://www.leastprivilege.com

> I've coded a VB.NET windows service that uses ADO.NET to communicate
> with both a MS Access database and an MS SQL Server 2000 database.
> I'm using SQL Authentication to validate access, but I'm not sure what
> options I have (if any) to secure the data transmission/communicate
> between my Windows Service and the SQL Server.
>
> I know with my web apps I can uses SSL, but what about standard .NET
> Windows apps -- do I have anyway to secure the data transmission
> to/from the SQL Server?
>
> Thanks,
>



Relevant Pages

  • Re: Unable to Apply SP4 to SQL 2000 Cluster (new Node)
    ... Rebuild the node in the failover cluster. ... Scenario 1" in SQL Server 2000 Books Online. ... This setup process updates to SP4 only the binaries on the new ...
    (microsoft.public.sqlserver.clustering)
  • Re: WSS 3.0 question
    ... I followed the advise given in removing WSS 3.0 etc, ... the server is complaining that the SQL service(?) was tempered with or corrupt. ... I may just instal the SQL server as I was going eventuall use it anyway. ... If WSUS 3.0 is installed, I would suggest you uninstall it and then you install WSS 3.0. ...
    (microsoft.public.windows.server.sbs)
  • Re: SQL Server 2005 Cluster Setup Quiz
    ... I did test and it did not install the client tools. ... http://www.clusterhelp.com - Cluster Training ... Microsoft SQL Server MVP ... Provide a template on how to read SQL Server 2005 setup log files. ...
    (microsoft.public.sqlserver.clustering)
  • Re: WSUS
    ... I'm not seeing performance issues with the full enchilada installed, and 25 users busy hitting SQL. ... WSUS isn't difficult to uninstall - if you have WSUS v2 (installed with SBS R2) uninstall R2 from add/remove programs. ... How can anyone work with 4 instances of SQL Server on the same box? ...
    (microsoft.public.windows.server.sbs)
  • Re: Cannot setup SQL Mail on SBS 2003
    ... Microsoft CSS Online Newsgroup Support ... Cannot setup SQL Mail on SBS 2003 ... The account you use to start the SQL Server service must be a domain ...
    (microsoft.public.windows.server.sbs)