Re: Protecting data against local admin

Erland Sommarskog wrote:
If you install your own instance, you can set up your own master key. But the application needs to provide the password, and that can of course be
eavesdropped, even if I believe it will be hidden in Profiler.

In that case, would it be best to use asymmetric encryption, so that only the public key will be transmitted to the server? We'd still have to somehow obfuscate the private key in the client application, of course.

Cheers,
Rik
.