asp.net web.config encryption
<p>why is it considered correct practice to encrypt sensitive data in web.config before deployment? if the website is hosted on-site, how can it be a risk not to encrypt this data?</p>
