Re: Security - Best Encryption Tool

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Alek Davis (alek_xDOTx_davis_xATx_intel_xDOTx_com)
Date: 06/02/04

  • Next message: Florin Lazar [MSFT]: "Re: How to create and use a Transaction Broker" 
    Date: Wed, 2 Jun 2004 15:02:11 -0700

    WJ wrote: "I like its [DPAPI] concepts of Machine Store for web applications
    and User Store for windows form applications."

    Machine Store is not safe. If a hacker manages to get the WRITE access to
    any of the folders on a compromised machine, he can drop an application
    there which will decrypt any setting encrypted using DPAPI with machine
    store. This is not a very far-fetched scenario. DPAPI with user store for
    Windows forms-based applications is probably the best option, assuming that
    the application is always executed by the same user, which in our
    (corporate) environment is not the case. From my experience, the best
    candidates for DPAPI with user store are Windows services.

    Alek

  • Next message: Florin Lazar [MSFT]: "Re: How to create and use a Transaction Broker"

    Relevant Pages

    • Re: Security - Best Encryption Tool
      ... "I like its [DPAPI] concepts of Machine Store for web applications ... and User Store for windows form applications." ...
      (microsoft.public.dotnet.distributed_apps)
    • Re: Security - Best Encryption Tool
      ... "I like its [DPAPI] concepts of Machine Store for web applications ... and User Store for windows form applications." ...
      (microsoft.public.dotnet.framework.aspnet.buildingcontrols)
    • Re: Security - Best Encryption Tool
      ... "I like its [DPAPI] concepts of Machine Store for web applications ... and User Store for windows form applications." ...
      (microsoft.public.dotnet.framework.aspnet.security)
    • Re: Security - Best Encryption Tool
      ... "I like its [DPAPI] concepts of Machine Store for web applications ... and User Store for windows form applications." ...
      (microsoft.public.vb.general.discussion)
    • Re: Security - Best Encryption Tool
      ... > DPAPI with user store cannot be used from an ASP.NET application unless ... If you use DPAPI encryption with machine store and your ... >> Svein Terje Gaup ...
      (microsoft.public.vb.general.discussion)