mysql - 在连接字符串中排除敏感数据的优点和缺点？

Question

我总是在这里重新考虑。我更喜欢选择 No，因为它说它是敏感数据，但我想知道选择它的具体优点和缺点是什么。

Answer 1

在我看来，将敏感数据存储在连接字符串中的“优势”很简单，就是您无需关心在代码中进行设置，因此更加简单。这是否可以接受，取决于您的应用程序的安全需求:如果有人获取您的数据库密码，您有多在意？

根据 Microsoft's documentation :

Be aware that logon information and passwords may be visible in a memory dump. When data source logon and password information is supplied in the connection string, this information is maintained in memory until garbage collection reclaims the resources. This makes it impossible to determine when a password string is no longer in memory. If an application crashes, a memory dump file may contain sensitive security information, and the user running the application and any user with administrative access to the computer can view the memory dump file. Use Windows Authentication for connections to Microsoft SQL Server.