Question
We are trying to get our InfoSec team to approve your add-in but need a little info on what mechanism/data transfer protocol the SQL Connector uses to export Jira data to SQL. i.e. does it use ODBC, Data Factory, etc. and is it encrypted during transfer, does it use TLS (which version)?
Answer
The connector exports Jira data to customers' databases via JDBC drivers. Currently, SSL is not enforced for database connections by default.
If you configured your database to require SSL, the JDBC client should handle it accordingly. However, we cannot guarantee how each user has set up their databases, so enabling SSL requires proper configuration and testing on a case-by-case basis. This process may take time due to variations in database settings. Otherwise, forcing SSL could break exports for existing customers.
For web-based data transfers, TLS 1.2 is used if you access Jira over HTTPS. Outbound requests during export are encrypted via TLS only if the user's database server enforces TLS certificates. If TLS is disabled on the client's end, we do not use it to avoid disrupting the exporting process.
On the other hand, we are developing, enforcing, and implementing strict encryption for SQL connections using JDBC drivers. It will be released in the future.