The preview version of SQL Server 2016 has an interesting feature which shows that Microsoft can offer secure cloud storage if they want to.
Until now, the focus has been on securing data ‘in transit’ between the server and computers or between different servers. The data itself is ‘in the clear’ when saved in the cloud or server itself. Sure, you need the right name/password to access the database, but the fact remains that the database is readable.
It’s the key problem with cloud storage from OneDrive, Dropbox and most others. Your files or data might be safe in transmission but more vulnerable when saved in the cloud servers themselves. They are vulnerable to access by staff from the cloud company as well as government agencies.
The ideal is ‘end to end encryption’ where your files and information are in a secure form where the user (not the cloud store) has the keys.
Guess what SQL Server 2016 is offering? Yup, end to end encryption …
SQL Server 2016 will offer ‘Always Encrypted‘ on a per field basis. Selected fields can be encrypted on the database itself. Only trusted apps with the right authentication can get the encrypted data and decode it within the app itself. The app does all the encryption/decryption of data before it’s transmitted to SQL Server 2016.
Source: Microsoft
Microsoft is promoting Always Encrypted for sensitive data fields like Social Security Numbers, Credit Card details etc. There’s no apparent reason why Always Encrypted could not be used for as many database fields as possible.
It’s a start, I suppose. Gold stars to the first major company that offers encrypted cloud storage for files etc. Always Encrypted proves that Microsoft can do it, now they have to extend it to more customers and as fast as possible.
