16.10 - Using SSL and TLS Protection for DIGEST-MD5 Binding - Teradata Database

Teradata Database Security Administration

Product
Teradata Database
Release Number
16.10
Release Date
June 2017
Content Type
Administration
Security
Publication ID
B035-1100-161K
Language
English (United States)

Although Teradata provides SSL/TLS protection options mainly for systems that use simple binding, protection is also be beneficial for systems that use the default DIGEST-MD5 binding, and have an SASL SSF setting of 0. On these systems, SSL/TLS protects user credentials against man-in-the-middle attacks by obfuscating user credentials instead of transmitting them across the network in plain text.

SSL and TLS do not protect stored passwords, which systems that use DIGEST-MD5 binding store in plain text.