Sheesh, "Brother," in a forum like this, where everone is supposed to be professionals helping professionals, I'd expect a little more from another user. But this isn't slashdot, so I'll leave the finger pointing, name calling, and holier-than-thou attitude to lie solely on your side of the conversation. Instead I'll just justify my position.
Why am I concerned with HIPAA? I am a developer (not a JDE developer, a software developer) at a county government site. We have a Department of Human Services that provides money and services to clients. We also have a hospital or two that are part of our goverment. They are using or soon-to-be using OneWorld. Much of this data is of the type covered by HIPAA. So I guess now you can't say that you don't know of any heathcare providers using OneWorld.
"...just don't think that it is reasonable to expect OneWorld, or any other Enterprise Application to do it for you."
Please show me where in my post I claimed that OneWorld, or any other Enterprise Application, should encrypt data. I simply asked if it did; I made no assertions that it should.
"...the ones who spend inordinate amounts of time..."
Again, you read too far between the lines. If you were this interested in picking apart my post, then you should have noticed that my original query and my response came 41 minutes apart. That means that during those 41 minutes I went and downloaded a sniffer, installed it, ran a quick test, took a peak at the data, then posted my results on this forum for the benefit of any others who may have the same concern. 41 minutes. I'm not so sure that counts as an "inordinate amount of time."
"...I wonder why some folks get paid to sit around with a sniffer so they can tell us that ODBC sessions are in plaintext."
Yup, you missed the point again here. Of course it is obvious that ODBC data transfers are sent in plain text. What I was looking for was to see if perhaps JDE set up an SSL socket through which to tunnel the ODBC traffic. What I found was that it does not. I never claimed that it should, mind you, I just wanted to know if it did. I could find no documentation confirming or disconfirming this here, on the KG, or in the printed manuals. And I was asked to find out, so I did.
Thank you, "Brother," for allowing me the opportunity to further dissect my post. I'm sure it will be to the benefit of the JDE community.