RE: "correct" way to encrypt a connection string

Hello Dave,

As for connectionstring encryption, if you're using ASP.NET 2.0, the
built-in web.config encryption (DPAPI or RSA provider) is certainly the
preferred appraoch. Here are

#How To: Encrypt Configuration Sections in ASP.NET 2.0 Using DPAPI
http://msdn.microsoft.com/library/en-us/dnpag2/html/PAGHT000005.asp?frame=tr
ue

How To: Encrypt Configuration Sections in ASP.NET 2.0 Using RSA
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnpag2/html
/paght000006.asp

also, this encryption can be applied to normal .net 2.0 application's
app.config file has I've mentioned in the following thread:

http://groups.google.com/group/microsoft.public.dotnet.general/browse_thread
/thread/1bbeeb01ae5ca5c6/70dd27a4598ab060

Sincerely,

Steven Cheng

Microsoft MSDN Online Support Lead


This posting is provided "AS IS" with no warranties, and confers no rights.

.

Relevant Pages

  • How do I Use DPAPI to Encrypt and Decrypt Data (C#/VB.NET)?
    ... Use DPAPI to Encrypt and Decrypt Data ... The code below demonstrates how to call Data Protection API (DPAPI) ... In addition to encryption and decryption, ... public static string Encrypt ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • RE: "correct" way to encrypt a connection string
    ... DPAPI is easier to use on single servers - RSA is easier for web farms... ... As for connectionstring encryption, if you're using ASP.NET 2.0, the ... Encrypt Configuration Sections in ASP.NET 2.0 Using RSA ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Where/How to Securely Store ID and Password?
    ... > - Encrypted with DPAPI ... > encryption key. ... > Storing plain text passwords in Web.config is not recommended. ... > Many applications use custom text files to store connection strings. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Where/How to Securely Store ID and Password?
    ... - Encrypted with DPAPI ... While encryption ... Using Custom Text Files ... Many applications use custom text files to store connection strings. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: DPAPI or not DPAPI, that is the question
    ... The certificate can then be backed up and moved around as needed. ... carefull using one as a basis for your encryption. ... Please do not send email directly to this alias. ... > Don't use DPAPI to encrypt the data itself. ...
    (microsoft.public.platformsdk.security)