Using Isolated Storage for DB connection strings

Hi,

I'm using .NET 2.0 Beta 2...

I am using Isolated Stored to hold application settings and user setting, application data is stored in an Assembly scoped store and user data is stored in a User scoped store. My question is regarding the encryption of a db connection string. If the connection string is in the application store does that mean it is already encrypted and ONLY accessable by my application and therefore I don't have to specifically encrypt the data

Failing that is there anything in .NET 2.0 that will help me use DPAPI or just as well hide a secret key in my assembly. I suppose I could obfuscate my assembly to hide a secret key !!

Regards

Graham

Answer this question

Using Isolated Storage for DB connection strings

FredKapsFan
The isolated storage is not encrypted per se, it's just a directory in the file system. Other .NET applications can't access it, but you could just open an Explorer and read the file.

There's a .NET Wrapper for the data protection API available at www.franklins.net/dotnet.
Using Isolated Storage for DB connection strings

Answer this question