I've used the SqlMembershipProvider implementation provided as of ASP.NET 2.0 for user management in a public website. I have specific keys defined in the config file.
It is normally a good idea to change keys fairly often, but I'm unclear how this can be accomplished, since all the user information is stored based on the earlier key encrypted values.
Can someone point me to a link of recommended practices for this?
Thanks.
Kel
...
Go to the complete details ...