I have a few questions regarding the encryption process. I am planning on implementing the encryption, and I know I'll be challenged on these items.
1. What is the default RSA key size in IIS7.5?
2. Where are the decrypted sections stored? Is this space isolated from other processes?
3. When are the encrypted sections decrypted and released? I assume every time the application starts up and it is retained in memory until the application pool stops or is reset, but I haven't found documentation stating so.