Re: Oracle 11i login encryption?

From: DR <dr_at_invalid.address>
Date: Tue, 21 Feb 2006 09:10:46 +0100
Message-ID: <43facb04$0$15784$14726298@news.sunsite.dk>

"Sybrand Bakker" <postbus_at_sybrandb.demon.nl> ha scritto nel messaggio news:j8jkv19d8ho86369r3qj6tcp2h9aiovq5d_at_4ax.com...
> On 20 Feb 2006 13:43:22 -0800, fwrogue_at_gmail.com wrote:

>>If you do not configure SSL, when you login to the application are you
>>username and password sent in clear text from your browser to the
>>application server?  And after login, if you do not use SSL, is
>>information sent in clear text to the app server across your internal
>>network?

> Traffic between the app server and the database is sqlnet traffic,
> the app server acting as a client to the database.
> sqlnet traffic is by default not encrypted, and every resultset is
> being sent as clear text.

The OP asked for the traffic between the client browser and the app server!

Dimitre Received on Tue Feb 21 2006 - 02:10:46 CST