Timeline for Which authentication is better for MS-SQL Server 2019 : integrated security=SSPI vs uid=sa;pwd=xx | windows auth vs sa auth
Current License: CC BY-SA 4.0
6 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| May 9, 2021 at 1:33 | comment | added | Ronaldo | If performance is your concern, it's very likely that you could find queries on your application that would benefit of improvement before increasing the security risk by using a SQL Server login in order to make authentication faster. | |
| May 9, 2021 at 1:24 | comment | added | Ronaldo |
You mention the sa login in your connection. You shouldn't have the sa as your app user unless absolutely necessary. If your application would happen to suffer a SQL Injection attack, with sa credential the attacker would be able to do anything with your database and wouldn't even have the trouble of searching for the names of objects as sa has access to a bunch of default objects that exists in a SQL Server instance. See this.
|
|
| May 8, 2021 at 22:07 | history | edited | Ronaldo | CC BY-SA 4.0 |
grammar fix and removed text
|
| May 8, 2021 at 22:04 | vote | accept | Furkan Gözükara | ||
| May 8, 2021 at 21:50 | answer | added | Ronaldo | timeline score: 3 | |
| May 8, 2021 at 20:52 | history | asked | Furkan Gözükara | CC BY-SA 4.0 |