July 2004 - Posts

7
Comments

Storing Sensitive Data in Config Files by HernanDL

Many people usually ask how they can store sensitive data in configuration files. Configuration files are definitely a bad place to store sensitive data like user credentials or connection strings. Here and here you will find some guidelines about storing...
Filed under:
17
Comments

Forms authentication and role-based security by HernanDL

In a recent post about Forms Authentication and Roles that showed the way to improve performance when you have to fetch the roles info on each page hit, some people note that the proposed solution suffered from the cookie size limit and the approach was...
0
Comments

My Laptop Got Altitude Illness by HernanDL

This week I flew to La Paz (Bolivia) to give consulting services to one of our customers. As you may know, La Paz is the highest capital city in the world (almost 12.000 ft / 3600 m). It’s a wonderful city but if you live in a city at the sea level (like...
Filed under:
11
Comments

SecureString in NET v1.1 by HernanDL

Every time you need to store sensitive data your first thought use to be encryption. You probably gather that data from the store, decrypt it and put it on a managed string in order to be consumed by some API (ie. ConnectionStrings properties and the...
Filed under:
More Posts