Topics from the Microsoft SQL Server Protocols team - Netlibs, TDS, SQL Browser, etc.
SQL Server 2005 offers the capability of channel encryption through the use of SSL (as did SQL Server 2000). The instructions for doing so are well documented in the BOL but I'll briefly descirbe what's entailed here.
It's important to note that the highest level of security is achieved when the client explicitly requests that channel encryption be used. This is because the client will attempt to validate the identity of the server using the SSL certificate in this situation and this helps mitigate man-in-the-middle attacks.
I should also mention that it is possible to get SSL encryption without provisioning a certificate because of the new self-signed certificate feature. I've posted a detailed explanation in the DataWorks blog so take a look if you're interested (http://blogs.msdn.com/dataaccess/archive/2005/08/05/448401.aspx). However, for security reasons, it is always preferable to use a properly provisioned certificate.
Il-Sung LeeProgram Manager, SQL Server Protocols
Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights
i'm having a problem with PowerBuilder apps. i have forced protocol encryption on the server. my PB apps, connect once and that's at. after some random period of time, the apps some interacting with the database like they've lost connection. i don't get any error messages, i don't see anything unusual in the traces. the web apps don't do this, but they do an sp_reset_connection quite often. the only way i can fix this is to turn off the "force protocol encryption" option on the server. i really need to encrypt all traffic to and from the server, but if it's going to stop some apps from working, i can't use it.