secure connection to mySQL

[sfullman]

Hi,

I have two questions:

1) If i'm running mySQL as localhost (i.e. on same box) and my web page is in https encryption, is my communication with the mySQL server secure?

2) what about if I'm running a secure page in htts, but my mySQL server is on another machine? I know my communication with the web server is secure, but what about web server to mySQL server? My guess is the answer is no.

And if this is the case, how can I tunnel that traffic between the two?

Thanks,
Sam Fullman
Compass POint Media

[[deleted]]

1: No. The communication is not secure, but it is safe because the only way to listen in on that connection is to have direct shell access to the server.

2: No (obviously) the database connection has nothing to do with what the webserver does, it is 100% seperate.

"And if this is the case, how can I tunnel that traffic between the two? "

Read the mysql manual:
http://www.mysql.com/doc/en/Secure_connections.html