encryption and it's keys

[Bob H]

HI,

I'm after some general pointers about best practice.

I've used TripleDES to encrypt the connection string of a web app. How do I
go about securing the keys in the app?

Many thanks for any advice.

Regards

Bob

 

[Alek Davis]

Bob,

There is no silver bullet here, but this article can give you some ideas:
"Safeguard Database Connection Strings and Other Sensitive Settings in Your
Code"
http://msdn.microsoft.com/msdnmag/issues/03/11/ProtectYourData/default.aspx.

Alek