I’m accessing a WCF service (hosted on Azure) from a Windows Phone 7 app and currently the connection string to the database is stored in the WCF web config file in plain text.
After doing some reading online – I’m just confused. What exactly are the reasons I should encrypt my connection string if the service is tucked away on Azure?
Thanks!
No, it is not
The next question is why not encrypt it? It is easy to do and the ‘whole’ security best practice is: dont make it easy for the bad guys. Personally, I agree with astaykov, but professionally, I would encrypt it.