Databases
StackOverflow2013
Postsdbo
PO.Net Encryption
 

Note that there are some explanatory texts on larger screens.

plurals
  1. PO.Net Encryption
    primarykey
    data
    text
    <p>What I would like to know is the definite approach to encrypting connection strings in a config file. Here are my questions:</p> <ol> <li><p>Using machine-level encryption, can't anybody accessing my server write a little .Net program to read the contents of the connection strings?</p></li> <li><p>If I am deploying my application to users machines in an enterprise environment, and the application has connection strings in a config file, how can I make sure only my application can decrypt it? The scenario is especially interesting in a ClickOnce deployment scenario. I've read about people storing the config unencrypted at the publisher server and encrypting at the machine level when the app is downloaded, installed and executed for the first time. This sounds so wrong to me - connection strings zipping unprotected through the wire, and sitting unprotected for a brief amount of time between download and application execution.</p></li> <li><p>Can I have a public and private key, sign my app, encrypt the config file with a key, and when the user executes it, decryption would only be possible from the signed application?</p></li> <li><p>Since I am using ClickOnce, I could have my encrypted sensitive information in the code or embedded, because ClickOnce won't detect a change unless the version # changes. So, if I need to recompile if I change my connection string, the point of an app.config is muted. What other approaches can I take, out-side using an config file, to achieve protection of the connection strings at the server, client and in between?</p></li> </ol>
    singulars
    1. PO
      singulars
      1. PTAnswer
    1. This table or related slice is empty.
    1. PTQuestion
    1. This table or related slice is empty.
    1. USGus Cavalcanti
    plurals
    1. PL
      singulars
      1. LTLinked
    1. PL
      singulars
      1. LTLinked
    2. PL
      singulars
      1. LTLinked
    1. This table or related slice is empty.
    1. PO
      singulars
      1. PTAnswer
    2. PO
      singulars
      1. PTAnswer
    3. PO
      singulars
      1. PTAnswer
    1. VO
      singulars
      1. PO.Net Encryption
      1. This table or related slice is empty.
      1. VTUpMod
    2. VO
      singulars
      1. PO.Net Encryption
      1. USSteve Dignan
      1. VTFavorite
    3. VO
      singulars
      1. PO.Net Encryption
      1. This table or related slice is empty.
      1. VTUpMod
    1. COCan you please describe your 1st question deeper? What is "machine-level" encryption?
      singulars
      1. PO.Net Encryption
      1. USnightcoder
    2. COAs far as I know you can use the built in encryption to encrypt at the machine-level and user-level. For instance, using configSection.SectionInformation.ProtectSection("RSAProtectedConfigurationProvider"); or through aspnet_regiis.exe
      singulars
      1. PO.Net Encryption
      1. USGus Cavalcanti
    3. COPerhaps It would make more sense to elaborate on your previous question asked yesterday (http://stackoverflow.com/questions/890396/click-once-how-to-encrypt-connection-strings) than to create a duplicate question worded differently.
      singulars
      1. PO.Net Encryption
      1. USPwninstein
 

Querying!

 
Guidance
A row detail

Detail views are divided into sections. All the information in the data section comes from columns in the selected row. The other sections display data from other, related rows.

Related data can be related in a to-one or a to-many fashion. Captions of data related in a to-many fashion link to a list view showing a filtered view of the table.

Try moving around until you find a non-empty to-many entry and click on the label to get to one. You can move back to the root by clicking on the database name in the header.

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload