pgina/pgina — Issue #87: Remove encrypted values from registry
Author: daw42
Created: 2012-01-25 23:00:02+00:00
State: open

Encrypted settings stored in the registry currently use an encryption key that is machine dependent. This makes it difficult to use cloning tools like Norton Ghost to deploy pGina to many machines. Since this is a common use case, I suggest that we do not use encryption in the registry, instead, store values in plain text, then use ACLs to protect the registry from "prying eyes." This does not damage the security in any meaningful way.