I am doing a conversion from Classic to ASP.net - -
all app settings and connectionstrings in the original app, are in the registry.
an include file reads the registry for each of these settings and creates an application variable for use in the project. They're using Xcopy deployment, by the way
1. First, that sounds like a lot of overhead, creating application variables for several dozen string variables, including connectionstrings (although they are application wide variables)
2. Is this done anymore?
They're concerned about the security of many of these strings. they think the web.config is not secure enough for their use.
I do know a little about decrypting the web.config settings area, but not enough to suggest anything specific in this context.
Thoughts?
...
Go to the complete details ...