I'm wondering about how other programs (aside from your own) can decrypt the standard out of the box asp.net membership database.
A little background: I let asp.net's Security/membership API take care of all the encryption, and salting of the database user passwords, profile objects, and other user details. In the system.web I have:
<machineKey
decryption="AES"
validation="SHA1"
/>
What I'm wondering is, what other steps would I need to take to ensure that some other program would be able to work with the database? For example, if I copied all my code, and compiled it all into a new DLL on another machine, I wouldn't be able to work with the database, is that so? If I wanted more than just my own program to work with the database, should I be setting up some manual keys up in th ...
Go to the complete details ...