Please start any new threads on our new site at https://forums.sqlteam.com. We've got lots of great SQL Server experts to answer whatever question you can come up with.

 All Forums
 SQL Server 2000 Forums
 SQL Server Development (2000)
 decrypt and execute question

Author  Topic 

pithhelmet
Posting Yak Master

183 Posts

Posted - 2008-01-22 : 12:13:41
Hello everyone,

This is kinda a crazy question, but i'll post it and see if anyone has any thoughts on it.

I have been tasked with a simple sounding question, the desktop application would like to encrypt the query, send it over the internet to the a stored procedure. This stored procedure will decrypt the query, execute the query, encrypt the results and send it back to the calling client to be decrypted and used.


So my question is this...

Outside of the performance issues, can anyone see anything wrong with doing this?

thanks
tony

AndrewMurphy
Master Smack Fu Yak Hacker

2916 Posts

Posted - 2008-01-24 : 07:24:36
Are these freeform, userwritten ad-hoc queries? can they not be canned?
I can see security issues?...everything will have to be done via dynamic SQL.
Go to Top of Page

pithhelmet
Posting Yak Master

183 Posts

Posted - 2008-01-24 : 08:43:07
Hi Andrew -

thanks for the reply.

It is a mixed array, but mostly the query is generated dynamically of the client machine,
the passed over to the server for processing.

Yes, i agree everything will have to be done through dynamic SQL, cannot see any other way around it.

Go to Top of Page

spirit1
Cybernetic Yak Master

11752 Posts

Posted - 2008-01-24 : 09:06:30
use ssl connection between clent and server. this is the proper way of doing it.

_______________________________________________
Causing trouble since 1980
blog: http://weblogs.sqlteam.com/mladenp
SSMS Add-in that does a few things: www.ssmstoolspack.com <- new version out
Go to Top of Page

pithhelmet
Posting Yak Master

183 Posts

Posted - 2008-01-24 : 14:04:51
ssl is a good solution....

but

that idea was dismissed
Go to Top of Page

Haywood
Posting Yak Master

221 Posts

Posted - 2008-01-24 : 14:10:38
quote:
Originally posted by pithhelmet

ssl is a good solution....

but

that idea was dismissed





Run. Now.
Go to Top of Page
   

- Advertisement -