Laziness, assumption and the difficulty in supporting self compiled apps over standard packages. Also, most projects I've worked on have either been firewalled or on a seperate internal only network for non-web layers...so it's less of an issue. Also, there is a performance overhead.
By non-web you mean a network not accessible from Internet right? I wonder if I should drop SSL as well... not much of a gain from it, as the DB layer is in fact configured as you said.
Comments
Laziness, assumption and the difficulty in supporting self compiled apps over standard packages. Also, most projects I've worked on have either been firewalled or on a seperate internal only network for non-web layers...so it's less of an issue. Also, there is a performance overhead.
By non-web you mean a network not accessible from Internet right? I wonder if I should drop SSL as well... not much of a gain from it, as the DB layer is in fact configured as you said.