How can i encrypt query string parameters in ASP.NET website?

Question

In one of my ASP.Net websites, I have to provide a link to the user in which all query string parameters should be encrypted.

What I am thinking is to use the command "aspnet_regiis" (as used to encrypt web.config data), pass output as a query string inside published url.

When the user clicks that link, I first decrypt the string and then fetch the original data for the query string.

Am I right in doing this? Is there any good technique to encrypt and decrypt query strings?

Answer 1

You don't need to call an external application. Use the cryptography API inside the framework to encrypt/decrypt data.

http://msdn.microsoft.com/en-us/library/system.security.cryptography(VS.71).aspx

Answer 2

I think you should try this out for querystring parameter encryption:

http://madskristensen.net/post/HttpModule-for-query-string-encryption.aspx