I just discovered that windows can store certificates and keys that an application uses in a 'crypto store'.
I would like to know how secure the store is? If I select for example high security and require a password to access the store when an application requests a crt or key, is it encrypted properly? Any idea what the encryption used is?
Other question is, if I don't require a password, then I can't see how it provides any security as the crt and keys must still be in plain text within the store and accessible to anyone who has access to my computer. In this usage case it seems about as secure as putting the crt and keys in a folder on the desktop called 'crypt store' or something. I.e it's just a way to organise things but doesn't add anything useful.
Thanks for info.