.NET Framework Security

Protecting Data

Data protection is something of which you should be aware. If you deal with any data that is sensitive in nature, the .NET Framework can help you protect it. In addition, there are some coding principles you should follow to prevent trivial discovery of sensitive data. Depending on where the sensitive data is—persisted to disk, stored in memory, or sent on the network—there are different approaches to protecting that data.

Data Persisted to Disk

Some data you want to store in your application may need to be protected. For example, if you want to store a credit card number or if you want to store data that is used to authenticate users (passwords, tokens, and so on), you probably don't want to just create a file named secrets.txt ...