Home/ Questions/Q 576211
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-13T14:01:23+00:00

If you use SQL Server Authentication (2005), are the login details sent in clear

  • 0

If you use SQL Server Authentication (2005), are the login details sent in clear text over the wire?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    As secure as you want to make it…

    you can configure SSL fairly easily, and if you don’t have a trusted cert, if you force encryption, SQL Server can create/issue it’s own self signed cert for your use…from this write-up

    Credentials (in the login packet) that
    are transmitted when a client
    application connects to SQL Server are
    always encrypted. SQL Server will use
    a certificate from a trusted
    certification authority if available.
    If a trusted certificate is not
    installed, SQL Server will generate a
    self-signed certificate when the
    instance is started, and use the
    self-signed certificate to encrypt the
    credentials. This self-signed
    certificate helps increase security
    but it does not provide protection
    against identity spoofing by the
    server. If the self-signed certificate
    is used, and the value of the
    ForceEncryption option is set to Yes,
    all data transmitted across a network
    between SQL Server and the client
    application will be encrypted using
    the self-signed certificate

    • 0