Some time back in the nineties, Microsoft introduced the Windows Registry. Applications could store settings in different hives. There were hives for application-wide and us
I think there is a huge security issue about Application Setting (.config files) is that can be edited in any text editor and change every thing.
Let's say that a connectionString is stored and some one deleted or changed all values in the config file then the application will have a lot of proplem so the config file should be protected.
or store Setting in DLL file for example.