which is more secure way to store connection string in ASP.NET Application?

Question

With .net Framework 4.5 shall i store encrypted connection string into web.config file OR i shall store connection string at Windows Registry and refer that in application?

Community · Accepted Answer · 2017-05-23 12:24:45Z

1

This answer probably applies here

The short version is the config file is going to be easier to backup and restore in the event of a failure somewhere, the registry entry is less likely to be accidentally deleted. Both methods have pros and cons.

Security of either of these things is probably comparable. Regardless of which method you choose, some care should be taken to set the proper permissions on either a registry entry or a config file.

edited May 23, 2017 at 12:24

CommunityBot

11 silver badge

answered Nov 16, 2016 at 19:23

jliles

3082 silver badges6 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

which is more secure way to store connection string in ASP.NET Application?

1 Answer 1

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related