Re: Dynamically load web.config and policyCache.xml

From: SA (informatica_at_freemail.nl)
Date: 07/15/04


Date: Thu, 15 Jul 2004 16:17:23 -0500

There might be a way to do this, but generally, what you would be looking
for is to encrypt the contents of specific app settings (such as a
connection string). You can write a wrapper function for your application
that would handle loading the values and decrypting them.

I wouldn't see a reason why you would encrypt debug='false' or WSE settings.
If you are looking to make the app settings tamperproof, I would start by
setting tight NTFS security on the web.config and policyCache.config files.

I am not sure how you can control the ASP.NET environment by using code, but
I feel that's the direction you should be looking for if you really need to
encrypt the entire web.config (in other words, find out how you can change
the settings in web.config using code).

-- 
Sven
http://www.adduxis.com
"Tim Bassett" <pocketpcbook@yahoo.com> wrote in message
news:9c529885.0407151243.37858113@posting.google.com...
> is there anyway to dynamically load web.config and policyCache.xml?
>
> We have an application where these two files need to be encrypted, so
> we'll be loading the encrypted version and decrypting it to a stream.
> We need to then load them into the runtime.
>
> Can this be done???
>
> Tim Bassett
>
> p.s. a email copy of your answer to pocketpcbook@yahoo.com would be
> appreciated.


Relevant Pages

  • Re: Digitally Encrypt
    ... I think the default settings are for a DC to Require, and a member to Request signing and/or encryption. ... This affects any non Windows NT client. ... digitally encrypt signing then it will compress normally and all will be ok, ... Digitally encrypt or sign secure channel data ...
    (microsoft.public.windows.server.general)
  • Re: [SLE] Encryption question
    ... torsdag 04 mars 2004 04:03 skrev C Hamel: ... > settings both in KGpg & kmail and they seem to be identical. ... You haven't, so my kmail just says: "No open key, to verify signature". ... You're probably using his "private" key to encrypt, ...
    (SuSE)
  • protection="None" not working...
    ... cookies still appears to be encrypted. ... When using these settings I have assumed that the ... I assume that the .Encrypt ... is to simply be able to create a string that the .Decrypt method will be ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • RE: How do I fix "no certificates that can be use" message on outl
    ... I'm not too sure how the settings ... > unless you have a digital signature/encryption certificate, ... >> " Microsoft outlook could not sign or encrypt this message becuase you have ...
    (microsoft.public.outlook.installation)
  • Re: New machine question.
    ... significant enuff to cause XP to yell and scream for a re-activation, ... I think I understand the Settings & Transfer process and if I'm correct it ... will only transfer my personal settings, app settings etc., but it won't ...
    (microsoft.public.windowsxp.basics)