DataProtectionConfigurationProvider decryption

shoeb_fbd
shoeb_fbd used Ask the Experts™
on
I am working on a winform application that uses a config file to connect to my server. Now I want to make the IP address of my server ecrypted. So I put the ip address in the appSettings section and encrypted it using DataProtectionConfigurationProvider. I do the ecnryption process during the installation/deployment process. I want to know the following:
1) Can anyone, the user, decrypt appSettings in the config file?
2) If tomorrow I planned to change the ip address of my server, is there a way to update that at the user side using a patch rather than sending a new release, build.
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Most Valuable Expert 2012
Top Expert 2008
Commented:
The user shouldn't have access to the config file, unless the web site is grossly misconfigured.  If you want to change the app.config file, then you could do a release of just the new exe.config file.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial