Won Yoo's Blog

  • Section level encryption of ASP.NET settings in IIS 7

    As you know, ASP.NET supports section level encryption for protecting its configuration.  It supports both RSA, which is default, and DPAPI out of the box and it also provides a way to use a custom protection provider.  (Click here for more information on using RSA.  Click here for DPAPI.)  The most commonly encrypted sections are appSettings, connectionStrings, identity and sesstionState.

  • Introduction

    My name is Won Yoo and I am a program manager in IIS team.  I've been with Microsoft for about 4 years.