Encrypt/Decrypt Connection Strings

Question

There is lots of information on encrypting and decrypting connection strings available. However, we need help on which method to use for our situation. We have many tablet clients connecting to an Azure database. We need to protect the username and password in the connection string on all of the clients. We don't want to have to create a key for each client but rather have one key for all of them. Better yet, no key at all. What is the simplest approach to use? Thanks.

Answer 1

In order for you to be able to decrypt the connection string, you would need to distribute a certificate to your tablets along with your application, and depending on the target OS that may be cumbersome or outright impossible.

My suggestion would be to put a middle tier between your clients and your database. It could be as thin as you need (eg look at OData), but would effectively protect your access to the DB.

Alternatively, set up a properly restricted user, and distribute the connection string in clear text.