Re: Encrypting connection string in app.config

Is string at client side or on server side (i.e. web server)?

--
William Stacey [MVP]

"Gilgamesh" <gilgamesh4ever@xxxxxxx> wrote in message
news:OHwdJ8YxGHA.3888@xxxxxxxxxxxxxxxxxxxxxxx
| Is there anyway to encrypt the connection string using an algorithm which
is
| FIPS 140-2 certified, and then store the key in a FIPS 140-2 certified
| hardware store? We know that DPAPI doesn't do that. We also know that
RSAENH
| is certified, but is there a way to use that to encrypt the connection
| string in the app.config?
|
| Any input will be appreciated,
| Gilgamesh
|
|


.

Relevant Pages

  • Re: Deployment + Vista
    ... The problem is it's connection string is always hard ... Server settings form. ... guess it's a good thing I do not use that for settings. ...
    (microsoft.public.dotnet.framework.adonet)
  • Re: Encrypted Connection String and Security....Quick Question
    ... Why don't you put the encrypted string straight into the web.config before ... I then encrypt the connection string using ... I upload the site to the shared hosting server. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Protecting Connection String Data from End-Users
    ... If the ACLed registry key is a bottleneck, you can also encrypt the ... connection string with a per-machine key using DPAPI and store the ... encrypted string it in web.config. ... The down side is that DPAPI isn't ...
    (microsoft.public.sqlserver.programming)
  • Re: Connection Stings
    ... Where strUDLPath contains the path to the UDL file. ... To use your connection string as an example, I would have worked it in this ... > like to be able to write a INI file or something so that the server name ...
    (microsoft.public.vb.general.discussion)
  • Re: Use Dpapi with Shared Asp.Net Web Host?
    ... Since the only directory I have access to on the web host server is a given ... > DPAPI is only suitable for encrypting and decrypting stuff on the same ... >> I'd like to use an encrypted database connection string. ... The dpapi should enable me to encrypt the ...
    (microsoft.public.dotnet.framework.aspnet.security)
Loading