I think the only way you are going to get any k8nd of real security on extensible data is to store it as an encrypted xml string field. You then have the issue of securing your encryption key. Security is all about balancing the value of the item/information against to effort and risk required to steal it. Data itself is useless unless you know the structure behind it. Even if someone were to go to the effort of spoofing your vendor and appid, they'd still have a hell of a time doing anything meaningfull with it. In my opinion the built in security is good enough unless you are storing national secrets.
↧