I'm developing a Delphi Web Broker application and need guidance on securing the configuration files. The configuration file contains sensitive information like database connection strings and API keys. I want to ensure that this information is adequately protected from unauthorized access.
Most of the organisations woulnt have the skill to compile the code for their deployment, so the aim is be as easy to set up as possible..
my head went to a .config file somewhere but is that opening up to an easy security problem, if the config file with DB passwords etc is always in the same place etc..
Any thoughts would be welcomed.
I can find a lot of generic information or things specific to deploying a desktop app, but not webbroker.