Session state ?

[WJ]

My web.config hosts an encrypted MS/SQL Database Connection String. Now I am
also planning to store session states to the same SQL/Server box. However,
the following settings will force me to expose my DB connection string:

<sessionState mode="SQLServer"
stateConnectionString="tcpip=127.0.0.1:42424"
sqlConnectionString="data source=127.0.0.1;Trusted_Connection=yes"
cookieless="false" timeout="20" />

Is there a way to instruct session state management to use encrypted
connection instead of that defined in "sqlConnectionString" setting ?

Thanks,

John

 

[F]

Says somewhere in MSDN docs that you need to encrypt the connection string,
paste the encrypted string into web.config. In your app, the class that
reads the conn string will need to decrypt it.

There's an example somewhere in the docs.