If you're concerned about keeping critical information in your Web.config file, then you should encrypt it -- or at least the parts that you're concerned about. By Peter Vogel 06/11/2009 I love ...

connectionStrings=ProductionConnectionStrings.config; Since Web Deployment Projects provide a reliable way to swap in production-specific settings in my Web.config file during deployment, my next step ...

Anyone with read access to the Web.config file could access the authenticated Web application. It is possible to store the SHA-1 or MD5 hash of the password value, rather than storing the password ...

Virtually all Web-based applications require some debugging. Visual Studio 2005 will even automatically modify the Web.config file to allow debugging when you start to debug your application.