trusted_connection=yes

From: Scott Pendleton (sp_at_isystant.com)
Date: 07/30/04


Date: Fri, 30 Jul 2004 06:18:08 -0700

I do not understand the usefulness, from a security
standpoint, of specifying "trusted_connection=yes" in the
SQL Server connection string in my Active Server Pages. It
seems like this:

Man: Give me all your money.
IIS: No, because you didn't say "trusted_connection=yes".
Man: trusted_connection=yes
IIS: Ok, here it is!

Do you see my point? What's the value of requiring a
trusted connection if, to get one, all you have to do is
ask for it?