config Files and Sensitive Info

[SQLScott]

In my VB.Net Windows app, I am storing certain information in the App.config
file. Howerver, there is certain information I would like to store there but
am hesitant to because I don't want it changed, modified, etc.

Is the App.config file still a good place for this, and if so, is there a
way to encrypt it so that the user has no idea what the value is? Or should
I be storing this elsewhere?

For example, my app times out after 30 days. I want to store the install
date somewhere, but if I install it in the App.Config, the users who know
what they are doing can modify this date.

Thoughts?
--
Thanks,

Scott

[Greg]

Write the install date into the registry and encrypt it. Just make sure you
remove the entry if the user uninstalls your app!
The config file is way to easy to modify.
"SQLScott" <SQ******@discussions.microsoft.com> wrote in message
news:79**********************************@microsof t.com...

In my VB.Net Windows app, I am storing certain information in the App.config file. Howerver, there is certain information I would like to store there but am hesitant to because I don't want it changed, modified, etc.

Is the App.config file still a good place for this, and if so, is there a
way to encrypt it so that the user has no idea what the value is? Or should I be storing this elsewhere?

For example, my app times out after 30 days. I want to store the install
date somewhere, but if I install it in the App.Config, the users who know
what they are doing can modify this date.

Thoughts?
--
Thanks,

Scott

[SQLScott]

Thanks Greg. I was leaning toward putting it there, but wanted to hear what
others said.

Scott

"Greg" wrote:

Write the install date into the registry and encrypt it. Just make sure you
remove the entry if the user uninstalls your app!
The config file is way to easy to modify.
"SQLScott" <SQ******@discussions.microsoft.com> wrote in message
news:79**********************************@microsof t.com...

In my VB.Net Windows app, I am storing certain information in the

App.config

file. Howerver, there is certain information I would like to store there

but

am hesitant to because I don't want it changed, modified, etc.

Is the App.config file still a good place for this, and if so, is there a
way to encrypt it so that the user has no idea what the value is? Or

should

I be storing this elsewhere?

For example, my app times out after 30 days. I want to store the install
date somewhere, but if I install it in the App.Config, the users who know
what they are doing can modify this date.

Thoughts?
--
Thanks,

Scott