The recent release of 5.6.6 includes a new utility, mysql_config_editor, which makes it easier to interact with MySQL clients securely. At the same time, it’s easy to overstate the security benefits of using this new tool, and unfortunately, I think a couple of statements in the release notes and documentation go a step too far (something we’re in the process of correcting). Ronald quoted one of them in his blog:
MySQL now provides a method for storing authentication credentials securely in an option file named .mylogin.cnf.
This enhancement really isn’t about securing passwords at a file-system level. Don’t assume that the encryption …
[Read more]