Re: SSL Encryption Test

xxdanbrowne_at_gmail.com
Date: 09/29/05

  • Next message: joseph mallier: "Re: Table security" 
    Date: 29 Sep 2005 07:49:10 -0700

    Correction: It looks like it is actually *working*.
    I sniffed the packets with force encryption on and cannot see anything
    intelligible.
    I sniffed the packets with force encryption off and I can make out
    everything passing back and forth between the sql server and the
    client.

    What is wierd as far as I'm concerned is how this is supposed to secure
    the system if *anybody* can connect. Basically the only protection it
    gives you is preventing packets from being sniffed and read, so someone
    could *still* connect using SSL and run a dictionary attack trying to
    guess sa if they knew what port you were on.

  • Next message: joseph mallier: "Re: Table security"

    Relevant Pages