Software development, .Net, SQL Server, TDD, Agile, Community and other Odds and Sods
Mitch Wheat has been working as a professional programmer since 1984, graduating with a honours degree in Mathematics from Warwick University, UK in 1986. He moved to Perth in 1995, having worked in software houses in London and Rotterdam. He has worked in the areas of mining, electronics, research, defence, financial, GIS, telecommunications, engineering, and information management. Mitch has worked mainly with Microsoft technologies (since Windows version 3.0) but has also used UNIX. He holds the following Microsoft certifications: MCPD (Web and Windows) using C# and SQL Server MCITP (Admin and Developer). His preferred development environment is C#, .Net Framework and SQL Server. Mitch has worked as an independent consultant for the last 10 years, and is currently involved with helping teams improve their Software Development Life Cycle. His areas of special interest lie in performance tuning
Wednesday, February 14, 2018
Do you Encrypt your Remote Connections to SQL Azure Databases?
If you’re not encrypting connections to SQL Azure (or any remote SQL Server instance), then you probably should.
Encrypted connections to SQL Server use SSL, and that is about as secure as you can get (currently).
[Remember: SSL protects only the connection, i.e. the data as it is transmitted ‘on the wire’ between the client and SQL Server. It says nothing about how the data is actually stored on the server].
When you open SSMS’s ‘Connect to Server’ dialog, click the bottom right ‘Options’ button, and make sure you tick the checkbox ‘Encrypt Connection’:
Ensure you add the -N command line option. The -N switch is used by the client to request an encrypted connection. This option is equivalent to the ADO.net option
When creating a linked server to SQL Azure, the @provstr parameter must be set to 'Encrypt=yes;’:
ADO.NET Connection strings
[Remember: don’t distribute passwords by sending as plaintext over the Internet, i.e. don’t email passwords! ]
MSN, Email: mitch døt wheat at gmail.com