Re: Wallet file on host only during startup

From: Alberto Dell'Era <alberto.dellera_at_gmail.com>
Date: Sat, 16 Dec 2006 00:00:02 +0100
Message-ID: <4ef2fbf50612151500k74ed4dd8j656cac077c7f7333@mail.gmail.com>

On 12/15/06, GovindanK <gkatteri_at_fastmail.fm> wrote:
> Good reference. But even Tom Kyte's followup does not shedding any light
> on how to keep the wallet on a diff. server.

I think the point was "don't do that" :) That is, moving the wallet on a different server doesn't add much to security - if my guess is correct, breaking the columns is several orders of magnitude easier than breaking the wallet. So an attacker would not even bother to examine the wallet; why breaking Fort Knox to retrieve the keys of a small home vault ? Hammer the vault instead.

But I hope that some security expert will chime in ...

--
http://www.freelists.org/webpage/oracle-l

Received on Fri Dec 15 2006 - 17:00:02 CST