Reputation: 9830
I've come across a couple of open source applications which recommend or require that a custom machine key is specified in web.config.
Why would this be necessary?
What is the reason, or advantage in specifying a custom machine key in web.config?
Upvotes: 0
Views: 481
Reputation: 2917
The first place a website search for configuration is Machine.config. Then Web.config overrides it.
Here are few reasons.
When you do Encryption and Decryption for example you can specify the keys in Machine key. Read this and this
And, if you need to share a value between multiple websites hosted on the same server.
Upvotes: 1