Storing DB Connection String - ideas??

[LuvASP]

I have an ASP web application that uses COM as the middle-tier. COM communicates with a SQL Server database and in COM we have the DSN-Less connection string to connect to the database.
I don't know how safe this actually is and am looking for alternatives to storing the database connection string.
One idea was to store the name of the server, username and password ENCRYPTED in a text file or in a different class in COM and DECRYPT it at the time the connection string is formed.
Any better ideas out there?
Thanks.

 

[chiph]

We just store it in the registry (and have used ActiveDirectory in the past). We figure if someone has access to the registry, we've got bigger problems...

But, if you want to, you could certainly encrypt it and decrypt it only in memory.

Chip H.