Where should encryption keys be kept? For my asp.net application I am using the Enterprise Library and creating an encrypted caching block. This is easy enough to setup and configure and I'm prompted to create an encryption key. Using the wizard makes this whole process very easy, but I'm confused when I'm asked to save the key to disk. Is this something that I want to keep with the project, or put somewhere else? When I move the site to the actual server do I need to include this file, or is it only needed initially? How guarded do I need to be with this key file?
Thanks for your help!
...
Go to the complete details ...