I'm looking at options to allow developers to access the Virtual Directories on production servers that comprise our intranet, while not disclosing sensitive data (i think its only in the web.config but would appreciate feedback). The sensitive data is in the connectionstrings, some appsettings,and the <identity>in <system.web> section.
I understand I can encrypt sections of the web.config. This is fine for <connectionstrings> because I want the entire section hidden from developers.But for <appsettings> and <system .web> there are only certain elements I want protected. I want most of it visible to developers for troubleshooting problems.
I understand i can store the <identity> element of <system.web>in the registry.
I understand that i can use the file= attribute of the appsettings to include settings from a file that developers can't read.
I think I could put the ...
Go to the complete details ...