In this chapter you learn to modify the web.config file and add your email and password in order to recieive emails from the website you've created. In real life would you actually hard code your email address and password? Is there some other way to handle this? It seems that your web.config file would be open to those hosting your website and they could hack your email.

Chuck

Hi Chuck,

Yes, that's potentially true. However, quite often in a hosted scenario you don't use your private mail account, but one supplied by the host instead. That is, you specify something like localhost or SomeServerInTheirNetwork as the host which then handles mail sending for you. These servers typically just send data and as such don't expose your e-mail. Also, because they are on the local network, you often don't have to supply a user name and password. Exact options differ from host to host.

If you do need to store sensitive data, you can encrypt it:

http://msdn.microsoft.com/en-us/library/ms998280.aspx
http://forums.asp.net/t/1418785.aspx

But: what can be decrypted by software, can also be decrypted by humans....

Cheers,

Imar

__________________
Imar Spaanjaars
http://Imar.Spaanjaars.Com
Follow me on Twitter

Author of Beginning ASP.NET 4.5 : in C# and VB, Beginning ASP.NET Web Pages with WebMatrix
and Beginning ASP.NET 4 : in C# and VB.
Did this post help you? Click the button below this post to show your appreciation!

Thanks again.

Chuck