Re: Encrypted Connection String and Security....Quick Question

Why don't you put the encrypted string straight into the web.config before
uploading?

--
Eliyahu Goldin,
Software Developer & Consultant
Microsoft MVP [ASP.NET]
http://msmvps.com/blogs/egoldin


"Ranginald" <davidwank@xxxxxxxxx> wrote in message
news:1170649747.955294.142490@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hi,

Assume I have an asp.net/sql server 2000 web app in a shared hosting
environment. I then encrypt the connection string using
ProtectSection("DataProtectionConfigurationProvider") in the page load
of my default.aspx page.

Am I understanding the following concepts then correctly?

1. I upload the site to the shared hosting server.
2. The first time I run the app eg. www.whatever.com/default.aspx,
the ProtectSection method above is executed.
3. Now the conn string area of my web.config is encrypted, and
asp.net will decrypt as needed.

4. If someone were to hack the server and view the web.config --
whether via getting into the server or via ftp, they would see an
encrypted connection string.


Thanks very much!



.

Relevant Pages

  • Re: bug in windows with adodb
    ... > I'm uploading a file to a server using ADODB.Stream in JavaSript, ... Convert the string to Base64 in Javascript. ... You will need some server side scripting to access from then on. ...
    (microsoft.public.scripting.jscript)
  • Did anyone upload file to php server by using swing applet before? Need help!!!
    ... Recently I wrote a swing applet for uploading files to ... same size files in the server. ... String file_name = file.getName; ... HttpURLConnection conn = null; ...
    (comp.lang.java.programmer)
  • Re: Will the real ASAAR please stand up?
    ... I downloaded GPG and uploading the key to a key server proved to ... be trivially easy, but actually using it to encrypt, sign and ... ASAAR with email address raasa@xxxxxxxxxxxx If you search for it, ...
    (rec.photo.digital)
  • Re: Use Dpapi with Shared Asp.Net Web Host?
    ... I will download it and try it. ... > I'd like to use an encrypted database connection string. ... > symmetric key) generated by .Net in my sql server database from asp.net ... The dpapi should enable me to encrypt the connection ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Encrypting connection string in app.config
    ... Is string at client side or on server side? ... but is there a way to use that to encrypt the connection ...
    (microsoft.public.dotnet.security)