There are a couple things you can do. If you host your own site or your 
host allows custom components, you could create a .dll to do all your 
processing. If not, Microsoft has a utility called "Script Encoder" that 
will do just that encode your ASP code so that it cannot be read or stolen 
by anyone. I have used it and it works great. 

http://www.microsoft.com/downloads/details.aspx?FamilyId=E7877F67-C447-4873-B1B0-21F0626A6329&displaylang=en

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/script56/html/SeconScriptEncoderOverview.asp

Soren






Andy and Kim Mills <[EMAIL PROTECTED]>
12/30/2004 07:34 AM
Please respond to active-server-pages
 
        To:     [email protected]
        cc: 
        Subject:        [ASP] Protecting Encrypition Key



Hello All:

We are in the process of using a Triple DES method to encrypt all our 
passwords, credit card numbers, etc.  However:  we are stuck on the best 
method to store our encryption key.  We obviously cannot write it down 
anywhere (code it into an application), as that compromises our security. 
Would anyone be able to suggest or give some guidence on the best methods 
to ensure our encryption key is secured and not able to be compromised?

Thanks for any help
Andy




--------------------------------------------------------------------- 
 Home       : http://groups.yahoo.com/group/active-server-pages
---------------------------------------------------------------------
 Post       : [email protected]
 Subscribe  : [EMAIL PROTECTED]
 Unsubscribe: [EMAIL PROTECTED]
--------------------------------------------------------------------- 
Yahoo! Groups Links



 




______________________________________________________________________
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email 
______________________________________________________________________



[Non-text portions of this message have been removed]



------------------------ Yahoo! Groups Sponsor --------------------~--> 
$4.98 domain names from Yahoo!. Register anything.
http://us.click.yahoo.com/Q7_YsB/neXJAA/yQLSAA/17folB/TM
--------------------------------------------------------------------~-> 

---------------------------------------------------------------------    
 Home       : http://groups.yahoo.com/group/active-server-pages
---------------------------------------------------------------------
 Post       : [email protected]
 Subscribe  : [EMAIL PROTECTED]
 Unsubscribe: [EMAIL PROTECTED]
--------------------------------------------------------------------- 
Yahoo! Groups Links

<*> To visit your group on the web, go to:
    http://groups.yahoo.com/group/active-server-pages/

<*> To unsubscribe from this group, send an email to:
    [EMAIL PROTECTED]

<*> Your use of Yahoo! Groups is subject to:
    http://docs.yahoo.com/info/terms/
 



Reply via email to