CODEWITHSUNDEEP
asp.netsql-server-2008
stack
stack

Reputation: 653

Is my username and password sent plaintext when connecting to my remote sql

Is our username and password that is sent over the network to connect to a 2008 sql db plaintext?

For instance

SqlConnection conn = new SqlConnection(connectionString);

Is the password and username sent plain text to the server for the initial handshake?

Upvotes: 3

Views: 1068

Answers (1)

NYCdotNet
NYCdotNet

Reputation: 4647

This TechNet article claims that the credentials for SQL 2008 are always encrypted:

http://technet.microsoft.com/en-us/library/ms189067(v=sql.100).aspx

Credentials (in the login packet) that are transmitted when a client application connects to SQL Server are always encrypted.

There are optional items you can add to your connection string that will also enable encryption for other types of SQL Server communication that may be worth investigating if point-to-point security is a concern for your application.

http://msdn.microsoft.com/en-us/library/system.data.sqlclient.sqlconnection.connectionstring.aspx

Upvotes: 1

Related Questions