> some folks swear by trusted connections.

Well, for anything but CF apps, I do too. They might be worth using if you
could just use a single database per CFMX instance. With trusted
connections, you use Windows accounts, and passwords for those aren't passed
over the wire.

> i don't actually know how it would work--it used to work that
> way for ODBC, maybe this version might allow you to impersonate
> another OS user, which would be pretty cool. i suppose i better
> actually read about this.

Windows account impersonation requires the "act as a part of the operating
system" right, which I wouldn't want to delegate to CF if I can help it - if
that security context gets compromised, there goes the neighborhood!

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
phone: 202-797-5496
fax: 202-797-5444
[Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings]

Reply via email to