Maybe the most secure solution in this situation is to put the connectionstring of the config in an environment variable instead of an XML file.

Anyway, in most of our deployments...

nick.mcdermaid (9/29/2010)

---

A. Why won't you consider using Windows authentication rather than SQL authentication - this gets around the entire issue as no passwords are saved. There are also many other...

that's the whole point.

If I use XML to store config to the database where my other configs are stored, then everything works fine

But if I store my "main" config also...

anyone?