Directory Browsing in ASP.Net

Question

Friends I have one real time scenario here in my asp.net web application i gave directory browsing = true and i can able to browse the directory files from the root folder in the IE browser. But when i tried to load the Web.Config file alone it gives error. What is the possible idea behind this i am sure opening webconfig from IE is security issue since it has all the connection strings and credentials. How exactly IE detects not to open the WebConfig alone?? Any suggestions and Comments???

Abhimanyu K Vatsa · Answer

i think suthish is right its IIS default behavior. otherwise the definition of shared hosting will be public hosting.....right?

Suthish Nair · Answer

Its IIS behavior hiding sensitive data from outside world. http://www.asp.net/data-access/tutorials/protecting-connection-strings-and-other-configuration-information-cs