How Do I Encrypt a Connection String? How Do I Protect My Settings in a Desktop Application?

[zakaria]

This channel is so so so so underrated !

[Otonium]

I love how this channel evolves, look at those panels in the wall to avoid reverb and so on. Great! 100% Quality

[andyhudsonsynthpop]

Another brilliantly useful video covering a topic that no one else really talks about, please, please do more on security and encryption generally would be great. In the web world there is a world of difference between encryption solutions available at an enterprise level and those on a typical shared hosting environment. No one ever talks about what to do, when you don't have server level access or out of the box enterprise software solutions.

[ardavaztterterian]

Some people get hyped up when their favourite singer uploads. And there is me I stop everything I'm doing to watch a Tim Corry video as soon as he uploads!

[StudentCompanion]

Thanks a lot Tim. Really great explanation. Much appreciate. Keep it up. You are making a difference in thousands of developers.

[dr.med.schlomov.aschkenasy]

Thank you so much. I thought so much about this issue and tried so many different approaches. This made it all clear.
I just became one of your patrons
. Keep up the great work

[stratman]

What great timing. I've just finished one of your courses on databases and have begun thinking about connection string security. Great video! Very helpful.

[alibarznji]

Next video Idea:
How to make a license for your application.

[jamesomambia]

Many thanks for these mini series they do give some light to my daily development. Keep them coming.

[mortezanejat]

We need more Tim Cories around the world. -_-

[jonchicoine]

I work in the healthcare industry… and our security team says even encrypted credentials only on the sever is not good enough! And I’m like, ‘well if they have access to the server that means they already have administrative rights … so what’s the point? Yet, I am still getting pushed to use a TPM or something like azure key vault… but, those options don’t feel that much more secure to me… it seems like you’re just relocating the problem. Would love to hear your thoughts on how to secure a solution in the financial or healthcare space! Once again though, awesome video… it’s shocking how much you know about so many things and how well you can disseminate that knowledge to your viewers!

[fabian.rieder]

Unfortunatly there was nothing about implementing such an Encryption in this video!

[bestshadow]

This is exactly the problem I have right now XD

And I also try to solve it in WPF. I will check out the playlist when I find it

[Vespyro]

Really appreciate your content as a Powershell guy diving into C#, awesome stuff!

[syedirfanahmad]

Hi Tim, your vlogs are good and value adding. This vlog is little confusing and complicated for less techy persons. The question remained there how to secure/encrypt a username/password written in a config file?

[ukaszk]

As system administrator I can confirm that 99% of custom desktop application are using connection data as plain text. Programers probably thing if they use file extension witch is not opening on click in notepad data are secured :D But the other hand, I didn't see any user with was figure it out. This is a very big security risk. This topic is very important. Tim you made impact for better applications!

[kevingates]

We have talked about this at work before. Great video idea.

[krisnarxf]

Yess, this is what i looking for!

Thanks for the information sir.

[JonWood]

Have you messed with Azure Key Vault any? That may be a good way to help secure keys and connection strings

[thatguyty]

You are a legend sir.

P.s. Bald gang rise up!