New answers tagged iis
The main issue here is that if one server gets owned, all of your servers are compromised. If you're ok with that, then there's no problem but if that's not acceptable, you should really use different keys.
Main problem with sharing the same private key between several servers is that it implies that, at some point, necessarily, the private key travelled. The more a private key travels, the less private it becomes. But, of course, that's a general comment; actual context details matter.
DPAPI actually works through 2 pretty simple function calls: CryptProtectData and CryptUnprotectData. To make a long story short, CryptProtectData has two mode of operation: User or system. If you use the user mode (default), then the data is encrypted using the current user logon data. It means that you can only sucessfully call CryptUnprotectData on the ...
Top 50 recent answers are included