parisjohn736

Hi

I wonder if someone could explain to me what our level of exposure might be if we were to use a MySQL database (hosted on a shared CPanel server - so we can't enable SSL)?

Currently we use Microsoft SQL on-premise but I'm looking at how we can decommission the on-premise setup. Currently the database is encrypted with a master password, and we use AD Integrated logins. There are 4 technicians using RDM Enterprise only.

My concerns with MySQL would mainly surround;

1. The data in the database, should someone steal the mysql data file - is full database encryption sufficient to deal with this?

2. The data in transit - once our clients connect over the internet, is information transmitted in clear text between them, if we aren't using SSL?

3. Database login security - if we're using database logins, and someone gained access to the database and changed a login password, would we still be protected from data exfiltration by the encryption password?

4. Is there any complication migrating from MS SQL to another data source - would we lose private vaults, for example?

Is there anything else we might have missed?

Thanks