I have a mail server with a MySQL database back-end. The mail server and MySQL DB are both installed on the same Windows machine. Is there any benefit to using SSL connections between the two applications on localhost?
I think the connection is using TCP and not local sockets.
Based on this question about SSL on a trusted LAN, I don't think there is any benefit for local connections. It seems like an attacker would have to be on the machine to read the traffic, and if attackers can get on our machine they can probably get whatever they want. But this setup was already using SSL when I joined the team. I performed a MySQL upgrade and now I'm having trouble with the SSL connection. I'm wondering if I would be correct to convince the team that we don't need SSL on localhost anyway.