Machine Key?

From: Andrew Robinson (nemoby_at_nospam.nospam)
Date: 05/23/05 

Date: Mon, 23 May 2005 13:05:40 -0700

I have a web site that needs to pass some data over the URL. I don't think
this data is super-sensitive, but certainly some potential client or
customer might think it is. I am successfully encrypting and decrypting my
data using the RijndaelManaged provider in System.Security.Cryptography and
am using a GUID as a key and I think all is fine.

Question:

1. Is there some place that I can store this key other than the registry
that will be easy for the user to change. I am thinking the key needs to be
the same across multiple servers in the event that this is used on a server
farm. I could put it in the config file? I have also read about using the
machine key, but how can I read / retrieve that key?

2. I have a custom server control that needs to access this key. Reading a
config file at design time is not very clean. Again, I think about the
machine config file and the machine key? How about using a resource?

-Andrew

Relevant Pages

  • Re: DOCSIS vulnerability
    ... Sure, you can get a config file onto the modem, but if ... the router will not allow the cable modem to finish booting (With some kind ... > items, a syslog server, a tftp server, a time server, and a config file to ... > rate limit their customers, it's how they keep their customers ...
    (Vuln-Dev)
  • Re: Using encrypted dB connection string
    ... >> I don't think that using DPAPI with machine key gives you any particular ... After all any application running on the same server will be ... Suspecting the hosting company to intentionally ... >> reasonably sufficient deterrent for most hackers. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Deserialization exception when using MarshalByRef object with events
    ... In your server's config file you have the element outside ... > of code from the server, client, MarshalByRef object, and .config ... > public void Start ... > public class Bomb: MarshalByRefObject ...
    (microsoft.public.dotnet.framework.remoting)
  • Re: Better way to manage DNS
    ... parser that would inturn set options on a w2k/w3k server and export the ... Justin has been working on a parser for the config file and general ... > Microsoft MVP (Windows Server System: ...
    (microsoft.public.windows.server.dns)
  • Re: Which authenttication is better
    ... > PreferredAuthentications in the config file or on the command line. ... >>hostbased method" of protocol 1 is tried first, ... >>I was presented with the server host's RSA ... >>The fingerprint from the 2nd one didn't match ...
    (comp.security.ssh)