March 18, 2002 at 4:01 am
SQL 2000
Is there a way to encrypt data files on a webserver?
March 18, 2002 at 4:47 am
If you are talking about SQL2000 database files running on the same server, the answer is no not thru SQL 2000. You can only have an external process that stores the data in an encrypted format. But if you are running the SQL server on the samw box as the web server you really are not letting SQL run as efficient as possible due to the way it uses memory resources. Also it is best to put the SQL server behind the webserver that way direct communication cannot happen with it.
"Don't roll your eyes at me. I will tape them in place." (Teacher on Boston Public)
March 18, 2002 at 5:37 am
I agree with Antares686 on the placement of the files. If you want to encrypt the data files anywhere, there's a pretty good product I've looked at called netlib ( http://www.netlib.com ). It also has some UDF functions to encrypt the column-level data.
Brian Knight
http://www.sqlservercentral.com/columnists/bknight
Brian Knight
Free SQL Server Training Webinars
March 18, 2002 at 8:42 am
Encrypting the data files will not really help. You need SQL Server to read them anyway, so I'm not sure this is worth the CPU cycles to do it. Better to encrypt data inside the server, though I'm not thrilled with this. The interface to the sql server, i.e. the web server, still has to get decrypted data, so if that server is comprimised, the encryption may not help.
Steve Jones
March 18, 2002 at 10:23 am
In addition if the server is compromised you most likely will have the key to the encryption password available anyway, so they have no work to do, and all you have done is increased the amount of work and time to display the data.
"Don't roll your eyes at me. I will tape them in place." (Teacher on Boston Public)
March 19, 2002 at 5:49 pm
Hi
Did you consider win2k's EFS? im confused as to what "encrypt data files on a webserver?" actually means, are you talking
a) data inside of your db?
b) data files uploaed to your webserver?
c) asp files?
d) db files?
Chris Kempster
www.chriskempster.com
Author of "SQL Server Backup, Recovery & Troubleshooting"
Author of "SQL Server 2k for the Oracle DBA"
Viewing 6 posts - 1 through 5 (of 5 total)
You must be logged in to reply to this topic. Login to reply