aspnet_regiis and encrypting web.config

SLWK

Guppy
.NET's aspnet_regiis.exe can encrypt connection strings and other appsettings in a web.config file. ie, aspnet_regiis -pe

I tried it locally with RSA as the encryption provider and it works.

I uploaded the partially encrypted web.config file to my asp.net 2.0 site and it threw an error saying that the RSA provider was not available.

This issue is not as important as the database connection one, but I was just wondering if it is possible to do web.config encryption on jodohost's servers.

Because this sort of thing could be used by asp.net 2.0 sites to protect against hacking and other people accessing your connection strings and that sort of thing.
 
If you're worried about keeping a connection string in a text file on your site, why not set it in the code-behind as an application variable? Nobody can ever get to it then. I do that with all my app settings, I don't like using web.config at all... a text file with all my settings in it just doesn't sit right with me. :)
 
Back
Top