Would like to share

Would like to share the StorageByMail website which we revamped over the past couple months, and relaunched on Rackspace Cloud servers for the client last weekend. StorageByMail is an NYC-based startup that enables customers to conveniently ship items into and out of storage.

The original site was in classic ASP, using all dynamic SQL. The new, more secure site is in ASP.NET with bound parameters, uses updated cryptography and the MembershipProvider and RoleProvider to replace a legacy homegrown user repository. Various new functionality has been added, as well as Telerik GUI controls for improved usability and user experience. AJAX abounds.

Dan @ SBM, we enjoyed working with you, and certainly hope to do so again.

Followup: Cryptographic key management

So after some wrangling with my webhost, playing with key containers, and chatting with an MS sort over on forums.asp.net, I've come to the conclusion that machine-level key stores are the proper way to store crypto keys on the server -- never use plaintext files, as I'd originally been considering.

The ASPNET and/or Network Service context should have access to store and retrieve keys from the machine-level store. You can insert them programmatically, or most host support staffers should be able to import them as well.

RSA Cryptography Demo

RSA Cryptography Demo

I've written a simple demo application in .NET 2.0/3.0/3.5 (C#) showing how to generate and manage keys and encrypt/decrypt data using the RSA asymmetric algorithm.