Groups | Blog | Home
all groups > dotnet security > december 2006 >

dotnet security : Config Info in DMZ



Nicol
12/12/2006 10:50:00 PM
Hi,
I have created one .net web application which will have all the DB
connection info in the config file. The system which has this application is
in DMZ. I don't want to place my DB connection info in the DMZ system. what
should i do?

how could i achieve this? will Windows share point web part help me in
hiding my DB connection string from external world?

Dominick Baier
12/13/2006 12:00:00 AM
you can encrypt them - .Net 2.0 has built in support for that - in 1.1 you
can use my DPAPI wrapper:
http://www.leastprivilege.com/DPAPITools.aspx

-----
Dominick Baier (http://www.leastprivilege.com)

[quoted text, click to view]

AddThis Social Bookmark Button