Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
HomeAnnouncementsFree MagazinesWhite PapersSubmit Content
Discussion GroupsASP.NETWindows FormsLanguages.NET FrameworkVisual Studio.NET
Articles.NET FrameworkASP.NETToolsWindows Forms
.NET DirectoryOpen Source ProjectsUser GroupsWeb Resources
Related Topics
Visual Basic 6SQL ServerMS AccessOther DB ProductsMS Server ProductsMore Topics ...

.NET Forum / ASP.NET / General / May 2008

Tip: Looking for answers? Try searching our database.

Encrypting Webconfig file values in .Net 1.1 Framework

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
madhusrp - 08 May 2008 20:23 GMT
Hi,
 Could anyone suggest me an idea to encrypt the webconfig file's connection
string in the framework 1.1.

Thank you in Advance
Signature

Lets Learn and Make All Learn

Mark Rae [MVP] - 08 May 2008 21:04 GMT
>  Could anyone suggest me an idea to encrypt the webconfig file's
> connection
> string in the framework 1.1.

Use any of the built-in methods in the System.Security.Cryptography
namespace:
http://msdn.microsoft.com/en-us/library/system.security.cryptography(VS.71).aspx

I'm curious as to why you need to do this...

Signature

Mark Rae
ASP.NET MVP
http://www.markrae.net

Mark Stevens - 09 May 2008 08:19 GMT
>I'm curious as to why you need to do this...

It is always prudent to encrypt sensitive information and connection
strings fall into this category.  Given that MS have provided an API
and method of doing this they obviously feel the same way.

Cheers,
Mark
Signature

      |\      _,,,---,,_          A picture used to be worth a
ZZZzzz /,`.-'`'    -.  ;-;;,       thousand words - then along
     |,4-  ) )-,_. ,\ (  `'-'     came television!
    '---''(_/--'  `-'\_)          

Mark Stevens  (mark at thepcsite fullstop co fullstop uk)

This message is provided "as is".

Mark Rae [MVP] - 09 May 2008 10:55 GMT
>>I'm curious as to why you need to do this...
>
> It is always prudent to encrypt sensitive information and connection
> strings fall into this category.

Are you worried that someone might hack your server and steal a copy of
web.config? If so, then the file's contents are surely the least of your
worries...

> Given that MS have provided an API and method of doing this they
> obviously feel the same way.

The Cryptography namespace is not *just* for web.config - it can be used to
encrypt anything...

Signature

Mark Rae
ASP.NET MVP
http://www.markrae.net

Teemu Keiski - 08 May 2008 21:09 GMT
Hi,

here's a walkthrough from "Building Secure ASP.NET Applications"

http://msdn.microsoft.com/en-us/library/aa302403.aspx#secnetht08_step3
How To: Use DPAPI (Machine Store) from ASP.NET 1.1

Signature

Teemu Keiski
AspInsider, ASP.NET MVP
http://blogs.aspadvice.com/joteke
http://teemukeiski.net

> Hi,
>  Could anyone suggest me an idea to encrypt the webconfig file's
> connection
> string in the framework 1.1.
>
> Thank you in Advance

Free Magazines

Get these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...

Oracle MagazineNetwork ComputingComputer WorldBio-IT WorldeWeekInformation WeekInfosecurity
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2008 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.