Possible to pull connection string password from external source

K

kbutterly

Good afternoon, all!

Our security standards require all passwords to be changed regularly.
Since there is a password in the web.config file for the connnection
string, the following question has been raised:

Can we store the password in a database table somewhere and have the
web.config pull it in from there?

The thinking is that this will avoid changing production code once it
is in production. The database table data will only be accessible by
the SQL DBAs.

I am pretty new at ASP.NET, and the idea doesn't seem sensible to me,
since we are going to encrypt the web.config file so it's safe, but
this is what the powers-that-be have asked.

I would really appreciate any thoughts on this idea; if it's possible,
feasible or reasonable.

Thanks so much,
Kathryn
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Members online

Forum statistics

Threads
473,755
Messages
2,569,536
Members
45,007
Latest member
obedient dusk

Latest Threads

Top