Secuity and tiers

[jjwpsiphi]

Does Three tier architecture provide more security?

[j2buttonsw]

The three tier software architecture (a.k.a. three layer architectures) emerged in the 1990s to overcome the limitations of the two tier architecture. The third tier (middle tier server) is between the user interface (client) and the data management (server) components. This middle tier provides process management where business logic and rules are executed and can accommodate hundreds of users (as compared to only 100 users with the two tier architecture) by providing functions such as queuing, application execution, and database staging. The three tier architecture is used when an effective distributed client/server design is needed that provides (when compared to the two tier) increased performance, flexibility, maintainability, reusability, and scalability, while hiding the complexity of distributed processing from the user. The three tier architecture is used when an effective distributed client/server design is needed that provides (when compared to the two tier) increased performance, flexibility, maintainability, reusability, and scalability, while hiding the complexity of distributed processing from the user. These characteristics have made three layer architectures a popular choice for Internet applications and net-centric information systems.

[OBonio]

No.  Security is only as good as the system design.  If anything, it makes it less secure with data travelling through the many layers (more places for bad coding practices to raise their head) and again less secure if the layers are implemented across different servers (network packet sniffers).  As I said though, if security is there as a part of the system design from the start, there isn't any reason why an n-tier system should be less secure than any other design.  It's just that there's more opportunity for things to go wrong.