Export (0) Print
Expand All

5.1 Security Considerations for Implementers

As previously described in this document, the TDS protocol provides facilities for authentication and channel encryption negotiation. If SSPI authentication is requested by the client application, then the exact choice of security mechanisms is determined by the SSPI layer. Likewise, although the decision as to whether channel encryption should be used is negotiated in the TDS layer, the exact choice of cipher suite is negotiated by the TLS/SSL layer. Likewise, although the decision as to whether federated authentication or SSPI authentication should be used may optionally be negotiated in the TDS layer, the exact choice of authentication mechanism is determined by either the SSPI layer or the federated authentication layer.

 
Show:
© 2014 Microsoft