Skip to content

Implement support for cloud DPAPI #2529

Closed
@aspnet-hello

Description

@aspnet-hello

From @GrabYourPitchforks on Thursday, October 9, 2014 6:19:27 PM

Currently Antares and most other hosting providers store machine keys in plain text in applicationHost.config. We store our keys in %HOME%, but still in plain text. We can't use DPAPI because it's not meant for scale-our scenarios such as these. We need to convince Antares and other hosters to make a CryptProtectData-like API for our consumption. One possible implementation would be for us to read a DLL path from the system registry, then to look for a CryptProtectData-like export from that module.

Copied from original issue: aspnet/DataProtection#22

Metadata

Metadata

Assignees

No one assigned

    Labels

    Needs: DesignThis issue requires design work before implementating.area-dataprotectionIncludes: DataProtection

    Type

    No type

    Projects

    No projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions