Re: [ADVANCED-DOTNET] SQL connection information - Encryption

2006-10-06 Thread J. Merrill
Are you saying that you can break into the stuff an app stores on your machine with MS's Data Protection API (DPAPI)? If this were backgammon, I would feel like I should "turn the cube" here. At 02:07 AM 10/3/2006, Dominick Baier wrote >If the code is running on the client there is no way to ef

Re: [ADVANCED-DOTNET] SQL connection information - Encryption

2006-10-03 Thread Dominick Baier
, DevelopMentor http://www.leastprivilege.com -Original Message- From: Discussion of advanced .NET topics. [mailto:[EMAIL PROTECTED] On Behalf Of Bryan Porter Sent: Montag, 2. Oktober 2006 20:53 To: ADVANCED-DOTNET@DISCUSS.DEVELOP.COM Subject: Re: [ADVANCED-DOTNET] SQL connection information - Encryption

Re: [ADVANCED-DOTNET] SQL connection information - Encryption

2006-10-02 Thread Pardee, Roy
Subject: Re: [ADVANCED-DOTNET] SQL connection information - Encryption Well, I believe the discussion moved from whether one should store the connection string in the app.config file towards an argument on whether you can associate a config file with a class library. Roy, you claimed that you

Re: [ADVANCED-DOTNET] SQL connection information - Encryption

2006-10-02 Thread Eddie Lascu
ssage- From: Discussion of advanced .NET topics. [mailto:[EMAIL PROTECTED] Behalf Of Pardee, Roy Sent: Monday, October 02, 2006 5:11 PM To: ADVANCED-DOTNET@DISCUSS.DEVELOP.COM Subject: Re: [ADVANCED-DOTNET] SQL connection information - Encryption But isn't it even simpler to make the class&

Re: [ADVANCED-DOTNET] SQL connection information - Encryption

2006-10-02 Thread Pardee, Roy
f advanced .NET topics. [mailto:[EMAIL PROTECTED] On Behalf Of Eddie Lascu Sent: Monday, October 02, 2006 2:05 PM To: ADVANCED-DOTNET@DISCUSS.DEVELOP.COM Subject: Re: [ADVANCED-DOTNET] SQL connection information - Encryption You can place the configuration parameters used by the class library straigh

Re: [ADVANCED-DOTNET] SQL connection information - Encryption

2006-10-02 Thread Eddie Lascu
cussion of advanced .NET topics. [mailto:[EMAIL PROTECTED] Behalf Of Dean Cleaver Sent: Monday, October 02, 2006 4:50 PM To: ADVANCED-DOTNET@DISCUSS.DEVELOP.COM Subject: Re: [ADVANCED-DOTNET] SQL connection information - Encryption If you use app.config from a class library, it simply reads the e

Re: [ADVANCED-DOTNET] SQL connection information - Encryption

2006-10-02 Thread Dean Cleaver
, 3 October 2006 09:39 To: ADVANCED-DOTNET@DISCUSS.DEVELOP.COM Subject: Re: [ADVANCED-DOTNET] SQL connection information - Encryption You can't use an app.config w/ a class library project, because you cannot run the class library. You can however have one app.config associated with

Re: [ADVANCED-DOTNET] SQL connection information - Encryption

2006-10-02 Thread Eddie Lascu
ed .NET topics. [mailto:[EMAIL PROTECTED] Behalf Of Pardee, Roy Sent: Monday, October 02, 2006 4:15 PM To: ADVANCED-DOTNET@DISCUSS.DEVELOP.COM Subject: Re: [ADVANCED-DOTNET] SQL connection information - Encryption I don't think you can use an app.config w/a class library project. You can prob

Re: [ADVANCED-DOTNET] SQL connection information - Encryption

2006-10-02 Thread Pardee, Roy
AM To: ADVANCED-DOTNET@DISCUSS.DEVELOP.COM Subject: Re: [ADVANCED-DOTNET] SQL connection information - Encryption There is but can you still use an App.Config file in a class. I've tried it but when I add the code to read the settings I continue to get null. I am successful in reading an

Re: [ADVANCED-DOTNET] SQL connection information - Encryption

2006-10-02 Thread Franklin Gray
of advanced .NET topics." Sent by "Discussion of advanced .NET topics." To: ADVANCED-DOTNET@DISCUSS.DEVELOP.COM cc: Subject: Re: [ADVANCED-DOTNET] SQL connection information - Encryption Ah, but where do you store the encryption key? We have

Re: [ADVANCED-DOTNET] SQL connection information - Encryption

2006-10-02 Thread Bryan Porter
ssage- From: Discussion of advanced .NET topics. [mailto:[EMAIL PROTECTED] On Behalf Of Franklin Gray Sent: Monday, October 02, 2006 9:44 AM To: ADVANCED-DOTNET@DISCUSS.DEVELOP.COM Subject: Re: [ADVANCED-DOTNET] SQL connection information - Encryption We've use a seperate xml file for all

Re: [ADVANCED-DOTNET] SQL connection information - Encryption

2006-10-02 Thread Sebastian Good
on of advanced .NET topics. [mailto:[EMAIL PROTECTED] On Behalf Of Franklin Gray Sent: Monday, October 02, 2006 9:44 AM To: ADVANCED-DOTNET@DISCUSS.DEVELOP.COM Subject: Re: [ADVANCED-DOTNET] SQL connection information - Encryption We've use a seperate xml file for all system settings that we don

Re: [ADVANCED-DOTNET] SQL connection information - Encryption

2006-10-02 Thread Franklin Gray
We've use a seperate xml file for all system settings that we don't want in the DB including the UserID, password and datasource. The whole file is encrypted. What we like about this is all we have to do is just one change and the whole system is updated. The location of this file is in the app

Re: [ADVANCED-DOTNET] SQL connection information - Encryption

2006-10-02 Thread Eddie Lascu
31 AM To: ADVANCED-DOTNET@DISCUSS.DEVELOP.COM Subject: Re: [ADVANCED-DOTNET] SQL connection information - Encryption There is but can you still use an App.Config file in a class. I've tried it but when I add the code to read the settings I continue to get null. I am successful in reading a

Re: [ADVANCED-DOTNET] SQL connection information - Encryption

2006-10-02 Thread Hevel, Shawn
AM To: ADVANCED-DOTNET@DISCUSS.DEVELOP.COM Subject: Re: [ADVANCED-DOTNET] SQL connection information - Encryption if this is for framework 2.0... isn't there a new connectionstrings section in the config files?...i'd swear i've seen something about automagic encryption in certain places

Re: [ADVANCED-DOTNET] SQL connection information - Encryption

2006-10-02 Thread Phil Sayers
OTECTED] Behalf Of Eddie Lascu Sent: Monday, October 02, 2006 9:56 AM To: ADVANCED-DOTNET@DISCUSS.DEVELOP.COM Subject: Re: [ADVANCED-DOTNET] SQL connection information - Encryption Yes, windows authentication is the way to go. However, if for whatever reasons you still want the connection string

Re: [ADVANCED-DOTNET] SQL connection information - Encryption

2006-10-02 Thread Eddie Lascu
@DISCUSS.DEVELOP.COM Subject: Re: [ADVANCED-DOTNET] SQL connection information - Encryption keep the database server name only in the config file. ..optionally keep the database name in the config fie. use windows integrated authentication to connect to the sql server. with the sql account options, you can

Re: [ADVANCED-DOTNET] SQL connection information - Encryption

2006-10-02 Thread Davy J
Have a look at http://msdn.microsoft.com/practices/ the dataconnection and encryption do this automatically in the app.configfile for you. dj How can I encrypt my connection information without hard-coding the connection string in the class?<<< === This list i

Re: [ADVANCED-DOTNET] SQL connection information - Encryption

2006-10-02 Thread Phil Sayers
keep the database server name only in the config file. ..optionally keep the database name in the config fie. use windows integrated authentication to connect to the sql server. with the sql account options, you can set a default database...or make sure you use 4 part naming to explicitly specify