SQL Server SSL Connection

Desmond Lim SS 1 Reputation point
2021-03-24T03:54:06.773+00:00

Hi, Is SSL connection necessary if my DB and application are both in the same host ?

SQL Server
SQL Server
A family of Microsoft relational database management and analysis systems for e-commerce, line-of-business, and data warehousing solutions.
8,504 questions
No comments
{count} votes

3 answers

Sort by: Most helpful
  1. Olaf Helper 25,726 Reputation points
    2021-03-24T07:04:38.723+00:00

    SSL = "Secured Socket Layer" is an encrypted connection, e.g. for connection between different server or more if over internet.
    But if all is running on one server, then it's not that important.

    See Enable encrypted connections to the Database Engine

    No comments

  2. Desmond Lim SS 1 Reputation point
    2021-03-24T07:25:56.41+00:00

    Hi,

    Is it still relevant if both the application and the SQL Server are in the intranet ?

    No comments

  3. AmeliaGu-MSFT 13,881 Reputation points
    2021-03-25T02:38:06.327+00:00

    Hi DesmondLimSS-2550,

    Is it still relevant if both the application and the SQL Server are in the intranet ?

    Do you mean the application and the SQL Server are in the intranet and in the same host?
    If so, I think SSL encrypted connection is not very necessary as Olaf mentioned.
    If the application and the SQL Server are in the intranet and in the different server, I think it is better to enable encrypted connection. SSL can prevent unwanted sensitive data leak, or exclude the possibility for any SQL injection attack, and a network packet sniffer cannot read the data. Please refer to this thread which might help.

    Best Regards,
    Amelia


    If the answer is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread

    No comments