项目内的connectionString部署到云端时是否安全?
我在这里找到了一个有趣的博客,它解释了如何确保开发人员对连接字符串的可见性。 http://blogs.msdn.com/b/sqlazure /archive/2010/09/07/10058942.aspx
由于我是我的项目中唯一的开发人员,所以我不会担心这一点,但是我担心两件事
将包部署到 Azure 云时,我的连接是 项目中的字符串有被第三方看到的风险吗?或者是 整个包文件已加密?
部署包后,可以读取连接字符串吗 来自网络?或者它是否安全且防弹?
I have found here an interesting blog that explains how to secure the visibility of the connection string from the developers. http://blogs.msdn.com/b/sqlazure/archive/2010/09/07/10058942.aspx
As I am the only developer on my project, I wouldn't be concerned about that, however I am concerned about two things
While deploying the package to Azure Cloud, is my connection
string within the project in risk to be seen by third party? Or is
the whole package file encrypted?Once the package is deployed, can the connectionstring be read
from web? Or is it secure and bulletproof?
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(1)
如果使用 SSL 进行部署(通过 Visual Studio 或 Cloudberry Explorer 等工具),则配置文件可以正常到达 Azure 数据中心。
人都可以查看配置文件,
所以基本上,只要合适的人拥有正确的凭据,就可以了。
如果您是唯一知道 Azure Web UI 登录信息的人,并且您是唯一知道存储密钥并拥有证书密钥的人,那么我会说这是非常可靠的。
If you deploy using SSL (via Visual Studio or a tool like Cloudberry Explorer) then the config files get to the Azure data-centre ok.
Once they are there I believe the config files can be viewed by anyone who has
So basically, as long as the right people have the right credentials you are ok.
If you are the only person who knows the login to the Azure Web UI and you are the only one who knows the storage keys and has the certificate keys then I would say it's pretty bullet proof.