App.config protection - VB.Net 3.5

Question

I am using Visual Studio 2008 Pro to create a VB Winform application. I have some user configuration options, as well as an MS SQL connection string in my app.config file.

• What is the best way to ensure that no one can read these options in app.config?
• Is there any other area where there will be a connection string in plain text that I can also consider to ensure security?

Thanks!

Answer 1

app.config - . .NET app.config app.config Windows Forms.

: ! , . SecureString , , .. .

Answer 2

http://guy.dotnet-expertise.com/PermaLink,guid,b3850894-3a8e-4b0a-aa52-5fa1d1216377.aspx

, . , , , -, , , .

Answer 3

There's a post explaining how to encrypt settings in the app.config file.