encrypting and decrypting the web.config

Hello Everyone,
This might be a stupid question. I was going throught the stuff for enctrypting and decrypting the web.config file. We can encrypt the web.config file and decrypt it too so anyone who has access to my web.config file can decrypt it by attaching a web.config file to another application and creating a decrypt method. if I am right then the information in web.config file is not safe even if I am encrypting the connection string. Please let me know if I am right and if there is any othersolution for that.
 
 Thanks.
...