Hi Thomas,

yes this is a question on application design, I wanted to know how are
other people doing with client app security using an encrypted database. I
find that there is no other way than asking the user to login with his
windows user id, windows password and file password.
Ideally, we should ask the user to only enter his user id / window password
but I am afraid it is not possible to "generate" a file password without
compromising the security since it can be analysed by decompiling the app.

Do you agree?

Best regards,
Sylvain



On Mon, Jan 18, 2016 at 9:05 AM, Thomas Mueller <
[email protected]> wrote:

> Hi,
>
> I'm sorry but I don't really understand the question. It sounds like a
> question about application design, maybe you better ask on StackOverflow.com
>
> Regards,
> Thomas
>
>
> On Sun, Jan 17, 2016 at 7:55 PM, Sylvain Pointeau <
> [email protected]> wrote:
>
>> Hello,
>>
>> considering a client app using an encrypted database, using LDAP to
>> authenticate the user,
>> I was wondering if we have another option than to ask the user to enter
>> his user id, windows password and the file password?
>>
>> and what about the "sa" password? I was thinking to change the password
>> to a hash of something.
>>
>> What do you suggest?
>>
>> Best regards,
>> Sylvain
>>
>> --
>> You received this message because you are subscribed to the Google Groups
>> "H2 Database" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to [email protected].
>> To post to this group, send email to [email protected].
>> Visit this group at https://groups.google.com/group/h2-database.
>> For more options, visit https://groups.google.com/d/optout.
>>
>
> --
> You received this message because you are subscribed to the Google Groups
> "H2 Database" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> To post to this group, send email to [email protected].
> Visit this group at https://groups.google.com/group/h2-database.
> For more options, visit https://groups.google.com/d/optout.
>

-- 
You received this message because you are subscribed to the Google Groups "H2 
Database" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at https://groups.google.com/group/h2-database.
For more options, visit https://groups.google.com/d/optout.

Reply via email to