I'm trying to allow a remote server to access a MySQL instance that currently shares a Linux server with a web app. According to the documentation the only way this would be possible (unless I'm not understanding correctly) is if the bind-address directive is set to 0.0.0.0, which results in MySQL allowing access from any IP that can produce a valid user.
So, two questions:
a) how detrimental would this be to security?
b) is there a better approach to allowing both local and remote interaction with MySQL?