http://qs321.pair.com?node_id=915533


in reply to RFC: SecureString - Obfuscated / masked strings exept when you need them

Voted up.   Dealing efficiently with PCI requirements is always a nice thing.