Tag Info

New answers tagged

3

Yes, this is one of use cases that Protected Data (and the underlying DPAPI) was expressly designed for, and is generally probably the best mechanisms at your disposal. One thing I'd add is that it's best to set the DataProtectionScope to CurrentUser, which will offer stronger protection, because the data isn't available to other users and processes on ...


1

From what you described, it's not secure at all, for a bunch of reasons. The top two being: You're downloading data over HTTP. Even if AES provides confidentiality, it doesn't provide message authenticity or integrity. You're using hard-coded keys. Pulling those out would be trivial, even with obfuscation. This would mean I could MitM your traffic and send ...


2

First off, C# and .NET can't do deterministic builds. See the official response here. Post compile you may want to obfuscate your code or encrypt it. PDB files mean your exe can be debugged. Follow these directions to prevent PDBs from being created when in release mode. Note that deploying in Release is different than debug, and run time debuggers may ...



Top 50 recent answers are included