AES-Key is visible as plain text in my .exe.config file (which your lib needs even after deployment to work)

[Leonetienne]

How can i go about this?
This kinda destroys the point of having any encryption at all

[Tom-Kuhn]

This library was initially written to support .NET applications running on IIS. In that setup you can use something like aspnet_regiis.exe to encrypt the config section containing the AES-Key ( https://stackoverflow.com/questions/3349551/encrypting-app-config-file). This library needs to be modernized to allow for the key to be passed into it via a builder or its constructor to allow it to be of use in more modern scenarios where keys are stored in a key vault etc. I'm always happy to accept pull requests if you were considering making this change!

…

On Fri, 8 May 2020, 21:21 Leonetienne, ***@***.***> wrote: How can i go about this? This kinda destroys the point of having any encryption at all — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#7>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AA7E54Y2JF2WRM3E3IQKXRLRQRSVPANCNFSM4M4OBKCA> .