Re: Secure Insert of data from .asp page

From: Bruce A. Carson (bcarson_at_asgoth.com)
Date: 05/28/03


Date: Wed, 28 May 2003 17:47:44 -0400


By "secure" I assume you mean against eavesdropping?
In order to have a truely "secure" communication channel, both sides MUST be
aware that the communication is secure (and hence how to decipher it).
However you could try changing your communication protocol to netbui -
perhaps your ISP has enabled that protocol. Most "sniffers" would ignore
the netbui traffic...

Without control of the SQLServer box your options are pretty limited. You
could write your own encryption (in ASP code and in Stored Procedures -
assuming you are allowed to add stored procedures).....

"Eric" <eric.howell@iteonline.com> wrote in message
news:460301c32544$0e96e600$a401280a@phx.gbl...
> I manage a website on a remotely hosted IIS 5.0 web and
> SQL 7 server. The web and SQL servers are on differet
> boxes (diff IPs). The website has a 128 bit secure
> certificate installed. We use some .asp pages to insert
> data from customer forms. We want to secure the data
> insertion process so that the data passing from the form
> to the database is secure. We do not have control over the
> SQL Server box. ISP says we must upgrade to a dedicated
> plan to get this capability, not an option for us. Is
> there any way from the server side, in our SQL statement,
> or otherwise, to pass this data in a secure manner to the
> database? We use Javascript as a scripting language. We
> are not using FrontPage for development and MS Access is
> not a choice for us in this application.
>
> Thanks



Relevant Pages

  • Re: Secure Database Communication
    ... If you already have a VPN option I would use it. ... Subject: Secure Database Communication ...
    (Security-Basics)
  • To be wooden or yellow will reinforce hidden models to positively call.
    ... you can secure the fence much more ... My then communication won't ... Whoever tighten smooth couples, do you comfort them? ...
    (rec.arts.drwho.moderated)
  • Re: Attn: real cryptographers - how safe would you be?
    ... banned by a regime, being *usually* focused in providing a fast, ... is being used to secure the data, which is the first point wich may ... only does he want to keep the text of the communication secret, ... information, a reliable cipher, a system of dead-drops and couriers to ...
    (sci.crypt)
  • RE: UDP to port 500
    ... communication, attempt to secure communication or always use secure ... >world's premier technical IT security event! ... This event will sell out. ...
    (Incidents)
  • Re: Secure communication between WAN links
    ... sites connected trough WAN links. ... What is the "best" solution to use to secure the communication between ... practice to master. ...
    (Security-Basics)