New Post: How are SQL connection strings stored securely?

When demoing Composite C1 to colleagues in our IT department, they asked me where and how the connection strings to external SQL databases (for SQL functions) are stored.

I've found the file at:

~/App_Data/Composite/DataStores/Composite.Data.Types.ISqlConnection.xml

... that contains the encrypted strings, and am guessing that the associated public key tokens are stored in:

~/App_Data/Composite/DataMetaData/ISqlConnection [GUID].xml

Please can you tell me how the private keys are generated and what encryption method/schema is used? This information will help me to addresses their concerns.

Many thanks

David.