title: Connection String Best Practices
body: <p>What is the best way to manage connection strings in a web application, from a security standpoint?  I've done it several different ways.  I've stored them as plain text web.config setting keys.  I've also created a "Constants" class that has public read-only string properties for each connection string.</p>
  
  <p>Does anybody have any recommendations for managing connections strings in such a way that I will have no concern about them being maliciously discovered?  I am definitely open for encryption.</p>