none
Security with Sync Framework 2.1

    Question

  • Hi,

    Can anyone please let me know are there any security threat with Sync Framework 2.1 database providers? If so, how do can we implement that over the SSL?

    Regards,

    Tharaka

    Monday, January 06, 2014 5:46 PM

All replies

  • If by SSL you mean running it on https, sync fx out of the box doesn't support synching over http. You actually have to built a wcf service to enable synching in an n-tier setup
    Friday, January 10, 2014 12:08 PM
    Moderator
  • Hi JuneT,

    I'm bit confuse here. I am using Sync framework default database provider to synchronization (Sync framework 2.1). In here you said "sync fx out of the box doesn't support syncing over http", so could you please give me bit explanation how data transfer between client and server?
    Are there any security threat with this Synchronizing? 
    Can we use encryption with default database provider?

    One of our client needed to know the data security transferring through sync framework.

    I read the following article,
    http://msdn.microsoft.com/en-us/sync/bb887608.aspx

     From a synchronization perspective, Sync Framework supports the ability to encrypt data as it travels between databases. On the corporate side, SQL Server 2008 as well as existing IIS security can be leveraged for user authentication as users exchange data.

    Since we are using the default sync provider, could you please let me know how we can implement this?

    Please give me your answer. 

    Regards,


    Saturday, February 22, 2014 2:56 AM
  • Sync Fx using database sync providers simply connects directly to your databases. 

    On SQL Server connections, you can enable TDS encryption.

    as for HTTP, by default, you cannot connect to SQL Server over HTTP. so to get around that you can use WCF to build your sync service so you can enable the transfer over SSL

    Monday, February 24, 2014 1:28 AM
    Moderator
  • Hi June

    Thank you for the answer. It really helpful.  I know I can easily create WCF sync service using SyncFx Toolkit. Could you please also give some recommend links of samples for Sync Framework with WCF and SSL implementation?

    And also, following post mentioned about the encryption over the WCF

    http://stackoverflow.com/questions/2139186/sync-framework-microsoft-encryption-and-compression?rq=1

    Could you please give me your idea about that answer also?

    Monday, February 24, 2014 2:01 AM