安全性JDBC和Google Apps脚本 [英] Security JDBC and Google Apps Scripts

问题描述

Google脚本和远程数据库之间的JDBC连接有多安全？
有什么方法可以配置SSL？

解决方案

由于没有对Java信任库的访问能够生成一个客户端证书，我不明白这是如何实现的。

就连接的安全程度而言，如果您使用防火墙规则只允许Google服务器到您的jdbc端口：

  nslookup -q = TXT _netblocks.google.com 8.8.8.8 
  

在您的mysql服务器上设置用户的主机组件以仅允许这些ip范围，并设置安全证书大小密码以防万一。

中间人攻击将是唯一真正的安全问题，不确定这些日子MIM攻击的可能性有多大。 b $ b

I have a security related question on JDBC Service.

How secure is the JDBC connection between Google Scripts and a remote database? There's any way to configure SSL?

解决方案

Since there is no access to the Java truststore to be able to generate a client certificate, I don't see how this would be possible.

As far as how secure the connection is, if you are using firewall rules to allow only Google servers to your jdbc port:

nslookup -q=TXT _netblocks.google.com 8.8.8.8

On your mysql server set up the user's host component to also only allow those ip ranges, and set a secure certificate size password just in case.

Man in the middle attacks would be the only real security concern you have, not sure these days how likely a MIM attack would be....

这篇关于安全性JDBC和Google Apps脚本的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！