Re: [dtp-dev] a critical security bug

[Anil Samuel <anil.samuel@xxxxxxxxxx>]

Rob,

> vendor's DB).  The information in the profile is what is used when  
> opening
> connections and is encrypted when saved to the file system.

At Oracle, with Secure-by-default principle, we would have security  
issue with this when it is goes for assessment.
Why dont we use the above-said mechanism to encrypt even this  
password ? That way it wud be consistent too.

Regards
Anthos