Hello!

Tuesday, November 17, 2015, 6:26:04 PM, you wrote:

>> The engine should be able to find/validate the key on its own, when the 
>> database file is _opened_.

a> This depends upon crypt key holder plugin.  Even in SS it may be written
a> in a way forcing each connection to provide valid key (this ensures no
a> connections from std tools to database with restricted information). 
a> Even in CS it may be written in a way when first connection with valid
a> key opens access for all others (using shared memory).

As I remember correctly, InterBase does
- there must by special user SYSDSO, who creates System Encryption
Password and then keys to encrypt database or columns

- while DB is on the same computer, where SEP was generated,
nobody needs to specify it to connect to encrypted database.

- when DB is moved to another computer SEP is not "default" anymore and
connection need to specify it explicitly, in addition to
username/password.

-- 
Sincerely,
Dmitry Kuzmenko


------------------------------------------------------------------------------
Firebird-Devel mailing list, web interface at 
https://lists.sourceforge.net/lists/listinfo/firebird-devel

Reply via email to