views:

46

answers:

1

Hi,

I have an application to 'roll out' to about 20 people.

Storing the DB credentials in the config file is a no no, so what id like to happen, is for each PC to send its public key to the server, then the server encrypts and sends back data to client for decryption.

Are there any sort of TCP services I could run to do this that already exist? I would need a way to also prevent any TCP connection from sending a public key to get the data.

+1  A: 

Isn't it easier to encrypt that information and distribute the public key with it to the client.

Or:

use integrated security to connect to the database and set the user account to impersonate by client app.

Hope this helps...

norbertB
You need a private key to decrypt so why would i distribute the public key? Clients need access to the settings not the server. Also, I don't want any trace of the database server in the config file even if it is trusted.
Sir Psycho
No it's encrypted with private key and can be decrypted with the public key. Another option is to create a facade to database with webservices
norbertB