A much better approach than encrypting the data inside a database is to secure the database from unauthorized access. The methods of doing this depend on the type of database you are using.
 
If you are using SQL Server or any other database server, there should be ample facilities to set up groups and users. You can restrict access to the tables (or the database as a whole) to specific users. IMAIL obviously has access to this database, but you can restrict it from all others.
 
If your database is stored in MS Access (or any other file-based system) you can control read/write access to the file based on your network users and groups.
 
Basically, it's much more important to keep people out of the database entirely than to encrypt it. After all, if they can't get at the data, then they don't even have a chance at decrypting it.
 
----- Original Message -----
Sent: Thursday, May 18, 2000 9:43 AM
Subject: [IMail Forum] External Database Password

I have configured iMail to use an external database. In this database is the password field stored in clear text. Is there a way to have this field encrypted somehow to plug a security hole?

Reply via email to