What is best secured way to store connection string in app.config

[Sudip_inn]

i have stored my connection string in config file after encryption. when user open my config then they will not be able to understand but if any developer try to know the actual connection string then they can do it. if they debug the code then they can see what algo and salt i used to encrypt & decrypt connection string. so please discuss any best way by which no one will be able to see what is actual connection string ?

how could i secured connection string which i will know only or i can decrypt only after encrypt but from same dev team other one will not be able to read it back or decrypt. so please discuss few good ways. thanks

Continue reading...