In MS SQL Server 2005/2008 standard encryption all data in the database is encrypted using the SMK/DMK scheme. In this scheme a key is issued for each client connecting to the database. What would a hacker sniffing network traffic will see and what should be the strategy to prohibit this
- Would Applying Encryption inside the database will be enough.
- Would Applying Encryption outside the database (Applying encryption where the data originates) will be necessary.
- A Hybrid solution will be more suitable
- Do I also need to provide a secure link (SSL) between client and server ?