CODEWITHSUNDEEP
asp.netvisual-studio-2008securityweb-config
TheWolf
TheWolf

Reputation: 1695

Redacting ASP.net web.config File Contents

Other than database connection strings, by default are there any sensitive values populated in web.config by Visual Studio 2008? What are PublicKeyToken values are these sensitive values? Would it be bad security practice to publish web.config files with connection strings redacted?

Upvotes: 0

Views: 170

Answers (2)

dustyhoppe
dustyhoppe

Reputation: 1813

Public key tokens are used in association with private key tokens to sign .NET assemblies. The public key tokens are not sensitive. As for connection strings, it is common practice to encrypt the connection string and keep them in the web.config.

Upvotes: 1

John Saunders
John Saunders

Reputation: 161801

PublicKeyToken are not sensitive.

As to redacting connection strings, who are you afraid of? Who's going to get hold of your web.config?

Upvotes: 1

Related Questions