title: Best practice for managing web service credentials for Node.JS?
body: <p>We're planning a secure Node.JS server, which uses several third-party web services.  Each requires credentials that will need to be configured by the operations team.</p>
  
  <p>Clearly they could simply put them in plain text in a configuration file.</p>
  
  <p>Microsoft .NET seems to offer a better option with DPAPI - see <a href="https://stackoverflow.com/questions/508608/credential-storage-best-practices">Credential storage best practices</a>.  Is there a way to make this available through IISNode?   Or is there any other option to secure such credentials within Node-JS configuration?</p>
  
  <ul>
  <li>Charles</li>
  </ul>