Using Isolated Storage for DB connection strings

Hi,

I'm using .NET 2.0 Beta 2...

I am using Isolated Stored to hold application settings and user setting, application data is stored in an Assembly scoped store and user data is stored in a User scoped store. My question is regarding the encryption of a db connection string. If the connection string is in the application store does that mean it is already encrypted and ONLY accessable by my application and therefore I don't have to specifically encrypt the data?

Failing that is there anything in .NET 2.0 that will help me use DPAPI or just as well hide a secret key in my assembly. I suppose I could obfuscate my assembly to hide a secret key?!!?

Regards

Graham

[680 byte] By [Gravy] at [2007-12-16]
# 1
The isolated storage is not encrypted per se, it's just a directory in the file system. Other .NET applications can't access it, but you could just open an Explorer and read the file.

There's a .NET Wrapper for the data protection API available at www.franklins.net/dotnet.

DanielRieck at 2007-9-8 > top of Msdn Tech,.NET Development,.NET Framework Data Access and Storage...

.NET Development

Site Classified