Secure user name and Password in Web Config

Discussion in 'ASP .Net Security' started by maa, Jan 13, 2008.

  1. maa

    maa Guest

    I want to be able to securely encrypt a user name and password for a web app.
    The user name/password is to be used in for authorization to a web service
    not a db. For security reasons the company wants to encrypt what is in the
    web config file and be able to move the web app to different machines without
    having to re-encrypt it.
    Is this possible?
    Is there a security hole in this procedure that might be better handled by a
    call to a web service app holding the user name and password?
    Thanks,
    Marc
     
    maa, Jan 13, 2008
    #1
    1. Advertising

  2. have a look at the protected configuration feature in .NET (and the aspnet_regiis
    tool)


    -----
    Dominick Baier (http://www.leastprivilege.com)

    Developing More Secure Microsoft ASP.NET 2.0 Applications (http://www.microsoft.com/mspress/books/9989.asp)

    > I want to be able to securely encrypt a user name and password for a
    > web app.
    > The user name/password is to be used in for authorization to a web
    > service
    > not a db. For security reasons the company wants to encrypt what is in
    > the
    > web config file and be able to move the web app to different machines
    > without
    > having to re-encrypt it.
    > Is this possible?
    > Is there a security hole in this procedure that might be better
    > handled by a
    > call to a web service app holding the user name and password?
    > Thanks,
    > Marc
     
    Dominick Baier, Jan 14, 2008
    #2
    1. Advertising

Want to reply to this thread or ask your own question?

It takes just 2 minutes to sign up (and it's free!). Just click the sign up button to choose a username and then you can ask your own questions on the forum.
Similar Threads
  1. Zachary Hilbun
    Replies:
    4
    Views:
    570
    Zachary Hilbun
    Dec 20, 2004
  2. =?Utf-8?B?ZGF2aWQ=?=
    Replies:
    1
    Views:
    324
    Teemu Keiski
    Jul 5, 2006
  3. CSharpner
    Replies:
    0
    Views:
    1,143
    CSharpner
    Apr 9, 2007
  4. AAaron123
    Replies:
    2
    Views:
    2,372
    AAaron123
    Jan 16, 2009
  5. AAaron123
    Replies:
    1
    Views:
    1,425
    Oriane
    Jan 16, 2009
Loading...

Share This Page