Using ASP.NET’s protected configuration feature is recommended when your Web.Config file contains sensitive information.  The .NET Framework gives you two protected configuration providers, DpapiProtectedConfigurationProvider and RsaProtectedConfigurationProvider .  Depending on your application...