What's the best practice to securely connect to SQL Server 2008 from .net 4.0?
What is the best practice and most secure solution when connecting a .NET 4.0 application to SQL Server in 2008?
And how is it done in C # / vb?
I was thinking about connecting from an application to a SQL Server database over an encrypted connection and then using Application Roles .
Would this be a good approach?
+2
a source to share
2 answers
This is a very open question with no correct answer if you cannot describe the threats that bother you. Once you know which threats are of concern, the question can be answered correctly.
Are you worried about:
1) falsifying data as it arrives from the Client ↔ Server?
2) server authentication?
3) client authentication?
4) data disclosure, how does it deal with Client ↔ Server?
+1
a source to share