Thursday, March 01, 2007
Posted on Thursday, March 01, 2007 8:37:12 AM (Mountain Standard Time, UTC-07:00)  Comments [0] | 
Categories: ArcMap | Security
Just a quick posting for those who get this via an RSS Reader, and may not have seen the update to the original post - I recieved confirmation from ESRI that the password returned in IWorkspace.ConnectionProperties is encrypted. And, for what should be obvious reasons, they will not discuss / disclose the algorithms used (completely reasonable).

I also thought I'd clarify why I wanted to know this information - we are building an application which will manage the connection into ArcSDE, and the end user will not know the connection information. I simply wanted to be sure that they could not get this information via a simple VBA script (like the example @ EDN for IWorkspace.ConnectionProperties). Since the password is encrypted, it would require a substantial hack that's likely on par with the other security layers in the system.

Comments are closed.