SQL Server SSL Connection

Desmond Lim SS 1 Reputation point
2021-03-24T03:54:06.773+00:00

Hi, Is SSL connection necessary if my DB and application are both in the same host ?

SQL Server
SQL Server
A family of Microsoft relational database management and analysis systems for e-commerce, line-of-business, and data warehousing solutions.
12,692 questions
0 comments

3 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Olaf Helper 40,741 Reputation points
    2021-03-24T07:04:38.723+00:00

    SSL = "Secured Socket Layer" is an encrypted connection, e.g. for connection between different server or more if over internet.
    But if all is running on one server, then it's not that important.

    See Enable encrypted connections to the Database Engine

    0 comments
  2. Desmond Lim SS 1 Reputation point
    2021-03-24T07:25:56.41+00:00

    Hi,

    Is it still relevant if both the application and the SQL Server are in the intranet ?

    0 comments
  3. AmeliaGu-MSFT 13,961 Reputation points Microsoft Vendor
    2021-03-25T02:38:06.327+00:00

    Hi DesmondLimSS-2550,

    Is it still relevant if both the application and the SQL Server are in the intranet ?

    Do you mean the application and the SQL Server are in the intranet and in the same host?
    If so, I think SSL encrypted connection is not very necessary as Olaf mentioned.
    If the application and the SQL Server are in the intranet and in the different server, I think it is better to enable encrypted connection. SSL can prevent unwanted sensitive data leak, or exclude the possibility for any SQL injection attack, and a network packet sniffer cannot read the data. Please refer to this thread which might help.

    Best Regards,
    Amelia

    If the answer is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread

    0 comments