title: Protecting connection string from Man in the middle
body: <p>In my winforms application i am hashing the connection string in local level.</p>
  
  <p>But here a couple of questions. </p>
  
  <p>After my app decrypts the connection string, the connection string info is sent in clear text? And since my app is installed locally the man in the middle could be ANY user?</p>
  
  <p>How can i protect the connection string, becides the "force encryption" option, which requires an extra certificate?</p>