3 ms·
> 1. I need to be able to connect to my DB from anywhere. So do I. So I setup all my dbs with TLS mutual auth or equivalent. Even databases that don't support
by pritambaral 5y ago
> 1. I need to be able to connect to my DB from anywhere.
So do I. So I setup all my dbs with TLS mutual auth or equivalent. Even databases that don't support TLS natively (e.g., Redis 5 and below) get a TLS/SSH port-forward setup for them at the network boundary.
> I have a PW on my DB and that's it. Why do I need more than that?
If you're not using an MITM-proof connection (e.g., TLS or SSH), and you connect to your DB from a network that has me (maybe we're in the same coffee shop, maybe I'm working in your office, or maybe I just work at an ISP between you and your server), then I have your PW.