Skip to main content
Information Security

Return to Question

Bumped by Community user
deleted 4 characters in body
Source Link
symbiont
symbiont
  • 111
  • 4

I'm developing an application that will connect to Microsoft SQL Server in an internala local network:

  • I'm considering whether these connections need to use TLS
  • Or whether to leave it to the customer's administrators to use an encrypted tunnel, if they see fit. they may have other third party applications, also connecting to SQL Server.

But i'm not familiar with the solutions available to administrators to use an encrypted tunnel, besides VPN (and maybe a load balancer?).

Questions

  • What would you do?
  • What are the disadvantages to not using TLS in this context?
  • Are there any solutions available for sending connections through an encrypted tunnel? (examples of products please)

I would prefer the simpler case, where i'm not responsible for the encryption

Edit:

I expect that SQL Server will be running in a local network

I'm developing an application that will connect to Microsoft SQL Server in an internal network:

  • I'm considering whether these connections need to use TLS
  • Or whether to leave it to the customer's administrators to use an encrypted tunnel, if they see fit. they may have other third party applications, also connecting to SQL Server.

But i'm not familiar with the solutions available to administrators to use an encrypted tunnel, besides VPN (and maybe a load balancer?).

Questions

  • What would you do?
  • What are the disadvantages to not using TLS in this context?
  • Are there any solutions available for sending connections through an encrypted tunnel? (examples of products please)

I would prefer the simpler case, where i'm not responsible for the encryption

Edit:

I expect that SQL Server will be running in a local network

I'm developing an application that will connect to Microsoft SQL Server in a local network:

  • I'm considering whether these connections need to use TLS
  • Or whether to leave it to the customer's administrators to use an encrypted tunnel, if they see fit. they may have other third party applications, also connecting to SQL Server.

But i'm not familiar with the solutions available to administrators to use an encrypted tunnel, besides VPN (and maybe a load balancer?).

Questions

  • What would you do?
  • What are the disadvantages to not using TLS in this context?
  • Are there any solutions available for sending connections through an encrypted tunnel? (examples of products please)

I would prefer the simpler case, where i'm not responsible for the encryption

Edit:

I expect that SQL Server will be running in a local network

added 38 characters in body
Source Link
symbiont
symbiont
  • 111
  • 4

I'm developing an application that will connect to Microsoft SQL Server in an internal network:

  • I'm considering whether these connections need to use TLS
  • Or whether to leave it to the customer's administrators to use an encrypted tunnel, if they see fit. they may have other third party applications, also connecting to SQL Server.

But i'm not familiar with the solutions available to administrators to use an encrypted tunnel, besides VPN (and maybe a load balancer?).

Questions

  • What would you do?
  • What are the disadvantages to not using TLS in this context?
  • Are there any solutions available for sending connections through an encrypted tunnel? (examples of products please)

I would prefer the simpler case, where i'm not responsible for the encryption

Edit:

I expect that SQL Server will be running in a local network

I'm developing an application that will connect to Microsoft SQL Server:

  • I'm considering whether these connections need to use TLS
  • Or whether to leave it to administrators to use an encrypted tunnel, if they see fit. they may have other third party applications, also connecting to SQL Server.

But i'm not familiar with the solutions available to administrators to use an encrypted tunnel, besides VPN (and maybe a load balancer?).

Questions

  • What would you do?
  • What are the disadvantages to not using TLS in this context?
  • Are there any solutions available for sending connections through an encrypted tunnel? (examples of products please)

I would prefer the simpler case, where i'm not responsible for the encryption

I'm developing an application that will connect to Microsoft SQL Server in an internal network:

  • I'm considering whether these connections need to use TLS
  • Or whether to leave it to the customer's administrators to use an encrypted tunnel, if they see fit. they may have other third party applications, also connecting to SQL Server.

But i'm not familiar with the solutions available to administrators to use an encrypted tunnel, besides VPN (and maybe a load balancer?).

Questions

  • What would you do?
  • What are the disadvantages to not using TLS in this context?
  • Are there any solutions available for sending connections through an encrypted tunnel? (examples of products please)

I would prefer the simpler case, where i'm not responsible for the encryption

Edit:

I expect that SQL Server will be running in a local network

added 23 characters in body
Source Link
symbiont
symbiont
  • 111
  • 4

I'm developing an application that will connect to Microsoft SQL Server:

  • I'm considering whether these connections need to use TLS
  • Or whether to leave it to administrators to use an encrypted tunnel, if they see fit. they may have other third party applications, also connecting to SQL Server.

But i'm not familiar with the solutions available to administrators to use an encrypted tunnel, besides VPN (and maybe a load balancer?).

Questions

  • What would you do?
  • What are the disadvantages to not using TLS in this context?
  • Are there any solutions available for sending connections through an encrypted tunnel? (examples of products please)

I would prefer the simpler case, where i'm not responsible for the encryption

I'm developing an application that will connect to Microsoft SQL Server:

  • I'm considering whether these connections need to use TLS
  • Or whether to leave it to administrators to use an encrypted tunnel, if they see fit. they may have other third party applications, also connecting to SQL Server.

But i'm not familiar with the solutions available to administrators to use an encrypted tunnel, besides VPN (and maybe a load balancer?).

Questions

  • What are the disadvantages to not using TLS in this context?
  • Are there any solutions available for sending connections through an encrypted tunnel? (examples of products please)

I would prefer the simpler case, where i'm not responsible for the encryption

I'm developing an application that will connect to Microsoft SQL Server:

  • I'm considering whether these connections need to use TLS
  • Or whether to leave it to administrators to use an encrypted tunnel, if they see fit. they may have other third party applications, also connecting to SQL Server.

But i'm not familiar with the solutions available to administrators to use an encrypted tunnel, besides VPN (and maybe a load balancer?).

Questions

  • What would you do?
  • What are the disadvantages to not using TLS in this context?
  • Are there any solutions available for sending connections through an encrypted tunnel? (examples of products please)

I would prefer the simpler case, where i'm not responsible for the encryption

Source Link
symbiont
symbiont
  • 111
  • 4