Re: SECURITY - NewEra/ODBC

billy@west.co.za ("Billy Wheeler") wrote: :On 18 Jun 97 at 15:17, David Lapsley wrote: : :> One other question: Does INET encrypt passwords before passing them :> over the network and if not should this be considered a security :> risk. : :I-NET does not encrypt passwords AFAIK. But then, neither does :telnet! :-) Unless you have a large network with lots of nosey and :technically literate users, it's not generally a problem. However, as :Nils Myklebust and many others have pointed out, the whole :client/server security thing *sucks*. Yes, and the encryption of passwords is the smallest of all the problem (although still a serious issue in many cases). :One final thought: OpenLink software ( http://www.openlinksw.com ) :claim to have ODBC drivers that offer _some_ security enhancements. This is only helpfull if you make sure your users can't (easily) install other ODBC drivers. One way of doing that is to set up your OnLine database with no TCP/IP connection (use shared memory only). Then the OpenLink server based driver can still access it, but no client only ODBC drivers can. This obviously makes it impossible to use I-Connect (I-Net) and I don't know how well your NewEra applications will function with ODBC access only. My understanding is that I-Connect is better for NewEra, but I have no experiense. May be Billy can tell us something. Nils.Myklebust@idg.no NM Data AS, P.O.Box 9090 Gronland, N-0133 Oslo, Norway My opinions are those of my company The Informix FAQ is at http://www.iiug.org