Protecting asp.net machine keys and connection strings

home
asp.net
view story

1 Kicks

Protecting asp.net machine keys and connection strings(eglasius.blogspot.com)

submitted by eglasius(91) 1 year, 7 months ago

Last month I blogged about how the asp.net padding oracle vulnerability related to getting different levels of access to the application, where part of it involved gaining access to unprotected machine keys at the web.config of the affected sites. While the Microsoft's patch that closes the vulnerability is already on Windows Update and other distribution channels, it doesn't mean we shouldn't pay attention to keeping important access information of our application out of harms way. Protecting config sec...

add a comment |category: ASP.NET |Views: 4
Tweet