SQLServerCentral / Editorials / SQLServerCentral.com / Encryption Not Restriction / Latest Posts

RE: Encryption Not Restriction

Steve Jones - SSC Editor — Wed, 23 Jan 2013 08:41:31 GMT

[quote][b]Sarus1984 (1/23/2013)[/b][hr]Hi Steve,I know this post and I never got an response to my mail at this address - as I said, I'm totally stuckBut thanks for your try!Sarus[/quote]Sorry, I have a couple other things I'll PM you.

RE: Encryption Not Restriction

Sarus1984 — Wed, 23 Jan 2013 00:21:40 GMT

Hi Steve,I know this post and I never got an response to my mail at this address - as I said, I'm totally stuckBut thanks for your try!Sarus

RE: Encryption Not Restriction

Miles Neale — Tue, 22 Jan 2013 16:28:57 GMT

[quote][b]John Hanrahan (1/22/2013)[/b][hr]Wow read the article and it seems MASSIVELY naive. I find it absolutely understandable that the gov't wouldn't want it's data stored in an unfriendly country. I would think it is many times easier to break encryption when your data is sitting on a server that's been incorporated into the state security system. While storing the data in country is no sure thing it sure seems it is a sure thing that the data will be cracked stored somewhere else. Better to be paranoid than burned (or better to prepare for the worst and hope for the best).[/quote]Not all data is a candidate for the cloud! That which is should go, should go there. That which should not, should stay home. All should be encrypted.:-)M.

RE: Encryption Not Restriction

John Hanrahan — Tue, 22 Jan 2013 12:20:10 GMT

Wow read the article and it seems MASSIVELY naive. I find it absolutely understandable that the gov't wouldn't want it's data stored in an unfriendly country. I would think it is many times easier to break encryption when your data is sitting on a server that's been incorporated into the state security system. While storing the data in country is no sure thing it sure seems it is a sure thing that the data will be cracked stored somewhere else. Better to be paranoid than burned (or better to prepare for the worst and hope for the best).

RE: Encryption Not Restriction

Steve Jones - SSC Editor — Tue, 22 Jan 2013 11:40:44 GMT

[quote][b]Sarus1984 (1/22/2013)[/b][hr]Hi Steve,thanks for your thoughts on encryption, like you I think it is to much ignored in our business.I would like to ask a further question about encryption. Perhaps you can help, because I have resigned :-(Do you know where I can get information about the EKM api? I would like to integrate our pki-smartcards in the database security/encryption.And the only way, as I see it, is to write an own EMK Server DLL to connect to the client where the smartcard is.Help would be greatly appreciatedSarus[/quote][url]http://social.msdn.microsoft.com/Forums/en-US/sqlsecurity/thread/f36ba8b7-ceec-4bdd-8c84-8878e11194e3/#0f2c9a16-6d62-445a-931e-ffe0b0081dfc[/url]

RE: Encryption Not Restriction

TravisDBA — Tue, 22 Jan 2013 11:04:45 GMT

I am not sure that I would entrust the safekeeping and storage of the only thing that can decrypt my production databases in case of emergency, to my end-user community. I am not saying that I am against the idea altogether, but knowing most of my users the way I do, I would be definitely a little nervous about it. That's just me though I guess. :-D

RE: Encryption Not Restriction

anelson 66875 — Tue, 22 Jan 2013 09:37:38 GMT

Encryption is a key requirement to make cloud computing viable for serious business use at all.The comment about control of encryption keys is spot on.Control of the keys is the difference between a guest and a hostage.

RE: Encryption Not Restriction

Steve Jones - SSC Editor — Tue, 22 Jan 2013 08:53:53 GMT

No idea, but I'll ask around.

RE: Encryption Not Restriction

Sarus1984 — Tue, 22 Jan 2013 02:54:55 GMT

Hi Steve,thanks for your thoughts on encryption, like you I think it is to much ignored in our business.I would like to ask a further question about encryption. Perhaps you can help, because I have resigned :-(Do you know where I can get information about the EKM api? I would like to integrate our pki-smartcards in the database security/encryption.And the only way, as I see it, is to write an own EMK Server DLL to connect to the client where the smartcard is.Help would be greatly appreciatedSarus

Encryption Not Restriction

Steve Jones - SSC Editor — Mon, 21 Jan 2013 22:43:12 GMT

Comments posted to this topic are about the item [B]Encryption Not Restriction[/B]