On Monday 03 November 2003 06:22 pm, Geoincidents wrote: > > Apparently the folks at Microsoft aren't there yet . . . would > > *you* be willing to expose a stored procedure in a SQL Server > > database as a Web service? See > > http://www.theregister.co.uk/content/61/33718.html. The inmates > > are running the loony bin . . . > > Of course not, but then isn't that the point, to run this stuff on > the internet without leaving it "exposed"?
But IMHO, that *is* the point. If it's on the Internet, it's exposed . . . And if a stored procedure is exposed, then the whole system is exposed . . . The following URL (may wrap) points to what *Microsoft* has to say about Web services security. Now, imagine what a "secure" stored procedure must look like . . . http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnwssecur/html/securitywhitepaper.asp /g _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
