asp.net - best way to protect the machinekey other than dapi/encrypting web.config -
so need sso solution means both consuming website need same machine key.
is there way can encrypt machine key since it's stored plain text? aware can encrypt web.config , dapi stuff.
is there other way since both seem compromised if attacker gains access server itself?
Comments
Post a Comment