encrypting the user's email

Reply

Alex Crome replied on Thu, Jun 26 2008 3:50 PM

rated by 0 users

I would say encrypting a user's email address will be very difficult to do, and near worthless.  Password encryption is not too hard to do as CS never needs to see the raw password.  Passwords are encrypted using a one way mechanism, and to check if the user entered a valid password, you encrypt the password the user provided and see if the two encrypted versions match - this is why CS cannot send out your old passwords as CS CANNOT work out what your email address.

With an email address however, CS needs to know the raw email address in order to send out email notifications, and so will have to decrypt the user's email address in order to use it.

If you do want to encrypt the user's email address, you'll need to extensively modify the CS codebas in order to successfully decrypt the user's email address when needed, and you'll need to write your own custom membership provider to encrypt the email address.