Hi all,

Currently I'm negotiating with a client; I'm proposing a system that's accessibly by public from the Internet, and basically they're concern with the security of their data. Anyone knows in detail how security mechanism in DNN works? I mean, I know they used ASP.NET Provider and all, but I'm more interested in the logic implemented in those provider (encryption algorithm, etc).

Thanks

Hi cathal,

I was just reading one of your article regarding the security analysis on DNN, and it's very useful. Thanks for the very quick and explanatory reply, it answers all my questions. But I do have one more question, regarding the article you published. In that article, you mentioned that "Dotnetnuke has a built in function under the host menu that will accept al Password Encryption Key, and will encrypt the user details in the database. ". I was wondering if this is true? I'm using DNN 4.8.0 now, and I can't seem to find such option. Can you help me find it?

Thanks a lot =)

If I'm not mistaken, those machine keys are used only to encrypt the password of the whole portal right? I was wondering, if it's possible to encrypt the whole profile (names, address, etc) of registered users automatically?