Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Usenet -> c.d.o.server -> Re: Encrypting ODBC drivers?

Re: Encrypting ODBC drivers?

From: Rick Wessman <rwessman_at_us.oracle.com>
Date: 22 Feb 2000 08:05:50 -0500
Message-ID: <u3dql5qvl.fsf@us.oracle.com>


That's correct. However, you need the Advanced Security Option to get the needed support for encryption.

Once that's installed, all traffic, ODBC and otherwise, will be encrypted.

                                         Rick

Alexander Penev <penev_at_cska.net> writes:

> I think you can enable encryption on net8 level and odbc work over this
> label, so it's supposed that the odbc driver will use this encryption
> too........
> see the SQLNET.ora settings......
>
>
> Max Birkett wrote:
>
> > Hi all,
> >
> > I'm writing a web application which talks ODBC to an
> > Oracle database. The Oracle ODBC FAQ at...
> >
> > http://www.doag.org/mirror/frank/faqodbc.htm#SECURE
> >
> > mentions that ODBC drivers are inherently insecure...
> >
> > > How secure is ODBC?
> > > Any ODBC sniffer will be able to trace everything from an
> > > ODBC perspective. This includes data, usernames, passwords
> > > etc. However, if you are using an ODBC driver that provides
> > > encryption, you can increase your level of security
> >
> > I had a quick search and found some encrypting drivers
> > on the OpenLink website. All I'm after is an encrypting ODBC
> > driver set for Oracle 8i and Win NT/2000, but these seem
> > rather expensive.
> >
> > I don't mean to start a war, but I'd appreciate advice on
> > suitable driver vendors and whether the drivers provided are
> > appropiate for my needs.
> >
> > Thanks for your help in advance.
> >
> > Max Birkett
> > Rom ICT Solutions Ltd
> > Martins Building, Water Street,
> > Liverpool UK, L2 3SP
> > Tel (44) 0151 236 9966
> > Fax (44) 0151 236 9779
>

--

                                        Rick Wessman
                                        Security and Directory Technologies
                                        Server Technologies
                                        Oracle Corporation
                                        rwessman_at_us.oracle.com

       The statements and opinions expressed here are my own and do not
             necessarily represent those of  Oracle Corporation.
Received on Tue Feb 22 2000 - 07:05:50 CST

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US