Microsoft contemplating 'sharing' source of SQL Server
Published: 24 Feb 2005 16:15 GMT
Will the software industry's wave of open source databases spill onto Microsoft's turf?
Perhaps. The software giant is considering making the source code for its SQL Server database available to customers, according to Tom Rizzo, director of product management in Microsoft's SQL Server unit.
In an interview with ZDNet UK sister site CNET News.com, Rizzo said that the company is thinking about including the forthcoming SQL Server 2005 in Microsoft's shared-source programme for disclosing product source code to customers.
"It's not finalised. It's not anything there, but if a lot of customers demand it, we'll definitely look at doing shared source with SQL Server," Rizzo said.
Stephen O'Grady, an analyst at RedMonk, said Microsoft would do well to tap into some of the advantages of the open source development model.
"There is an opportunity to realise a lot of the benefits around the community in terms of security, transparency and openness and just demonstrate that they're not a natural enemy to open source," O'Grady said.
Exposing the source code of a product generally leads to more scrutiny of that product, which will help customers spot security lapses and other hard-to-find faults, according to open source proponents.
Indeed, the main motivation around sharing the source code of SQL Server would be mainly to assure customers of the security in the product, Rizzo said.
Microsoft already has a free database, Microsoft Database Engine (MSDE), and plans to release a revamped free database called SQL Server 2005 Express sometime this summer. Open source databases are generally available for free download; vendors often charge service fees for ongoing support and updates for commercial customers.
"Not a lot of people touch the code. They just want the good warm feeling that there are no back doors, no security violations," Rizzo said.
He added that with SQL Server 2005, Microsoft has boosted security by complying with an international software benchmark called the common criteria certification, often used by governments. The database development team also has changed its processes to conform with Microsoft's Trustworthy Computing plan, which includes having Microsoft employees attempt to hack the database server.












