I am looking to setup a website and database that are connected via the internet, and am looking to secure the connection. The connection will probably not be over a VPN, so shall be openly exposed.
From the research I have done, I see that you can use SSL and IPSec. The user I am setting up will only have
db_datawriter roles. The password will be set to expire every set period of time.
Is there anything else I should be aware of to ensure a secure connection from my website to database?