I was reading some information about implementing security methods into my asp.net web app, and the following quote has kind of confused me a little bit:
"Ensure only those accounts that require access are granted access to your credential store. This helps to protect the credential store by limiting access to it. For example, consider limiting access to only your application's account."
After reading that, I have come to the assumption that it is bad to allow a user or browser to have any form of access to my main database where all the main user information needed for logging in and using the website as a user (ASPNETDB.MDF) (my "credentials store" ...
Go to the complete details ...