Hi,
I am looking for a way to encrypt my Web.Config connectionStrings part. And I have two questions :
1. Why would I encrypt my connectionString? Is it hackable? Could anyone who have access to the website read the web.config in clear text from another computer than the server?
2. I've successfully encrypted my connectionString using aspnet_regiis, but we can easily retrieve the connectionString in clear text from the client just by providing the name of the connectionString (see code below)? What is the use of it then, is it somehow secured?
Thanks
Daniel
<%@ Page Language="C#" %>
<script runat="server">
protected void Page_Load(object sender, EventArgs e)
{
Response.Write("Clear text connection string is: " +
...
Go to the complete details ...