How To Force In-transit Encryption On Sql Azure Like On Regular SQL Server?

We are testing a proof of concept of our apps. We have a managed SQL Server instance on Azure that hosts our database. Before I go bug the Azure personnel we have on hand, I want

Solution 1:

The default is to encrypt all connections in transit via TLS as outlined at https://docs.microsoft.com/en-us/azure/sql-database/sql-database-security-overview#transport-layer-security-tls-encryption-in-transit

Unlike SQL Server ( where you can configure this by setting Force Protocol Encryption to OFF), this setting is on by default for SQL Database and is not use configurable.

The exception to this rule are some very old client ( e.g. jTDS) that can negotiate down (per TDS protocol) and connect unencrypted. Needless to say, we would advise you to use latest drivers & ensure that your app connects per the best practices outlined above.