Re: ConnectionStrings encryption



well - encrypting stuff on the client doesn't really buy you any security.

if the app is able to decrypt it (running in the user's context) - then the user is able too...

just keep that in mind...

---------------------------------------
Dominick Baier - DevelopMentor
http://www.leastprivilege.com

Here's another resource that discusses the issue in the context of
both Web and Windows forms:
http://msdn2.microsoft.com/en-us/library/89211k9b.aspx.

--Mary

On Fri, 30 Jun 2006 17:13:10 +0100, paulo <isf@xxxxxxxxxxxxx> wrote:

Hello,

I just found the following article on how to encrypt connection
strings in .config files with .NET 2.0:

http://msdn2.microsoft.com/en-us/library/dtkwfdky.aspx

However it focus on ASP.NET applications, and I also want to do it in
Windows Forms applications. Is this possible? Could someone point me
to a way to do it using the new .NET 2.0 Protected Configuration
classes? Thanks in advance for any help given.

Regards,
paulo


.



Relevant Pages

  • Re: ConnectionStrings encryption
    ... strings in .config files with .NET 2.0: ... Windows Forms applications. ...
    (microsoft.public.dotnet.security)
  • Re: EFS Certificate Needed
    ... Backup and save on non-degrading media the EFS DRA .pfx file ... Foe sure I will follow "Windows Recommendations". ... that recovery agent will only have ... Best practices for the Encrypting File System ...
    (microsoft.public.security)
  • Re: Can I access a decrypted file if I have all the files backed u
    ... I appreciate your taking the trouble to look up all those articles up for me, ... I installed Windows on the new hard drive ... Best practices for the Encrypting File System ... How to back up the recovery agent Encrypting File System private key ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Can I access a decrypted file if I have all the files backed up?
    ... I installed Windows on the new hard drive ... and ran restore to restore my backup. ... old hard drive to boot on the other computer. ... Best practices for the Encrypting File System ...
    (microsoft.public.windowsxp.security_admin)
  • Re: EFS Certificate Needed
    ... Foe sure I will follow "Windows Recommendations". ... that recovery agent will only have ... Best practices for the Encrypting File System ...
    (microsoft.public.security)