RE: FormsAuthentication.Encrypt and SSL

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: ASP.NET (VijaySachanMCPASPNET_at_discussions.microsoft.com)
Date: 07/27/04 

Date: Tue, 27 Jul 2004 10:21:46 -0700

Yes, It depends on your requirement but Form authentication is most suitable for intranet applications.

Using SSL is more suitable for internet applications as it provides more security 

-- 
Vijay Sachan
MCP - ASP.NET
"Gawel" wrote:
> Hajo,
> in book about security in ASP.NET I read that
> if I use Form authentication and need to make its
> data secure then I need to use SSL for all pages, not only for
> e.g. login page. It is interesting because form ticket is encrypted with
> FormsAuthentication.Encrypt and it seems that there is no need
> for additional ssl usage. Am I right ?
> 
> Gawel
>

Relevant Pages

  • Re: FormsAuthentication.Encrypt and SSL
    ... It depends on your requirement but Form authentication is most ... > suitable for intranet applications. ... Forms Authentication and SSL are complementary technologies. ...
    (microsoft.public.dotnet.framework.aspnet)
  • FormsAuthentication.Encrypt and SSL
    ... in book about security in ASP.NET I read that ... if I use Form authentication and need to make its ... data secure then I need to use SSL for all pages, ... for additional ssl usage. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: SSL enabled ASP.NET application, URGENT
    ... I have now SSL ... All my files are put in a sub-directory under the application root! ... > TIA ...
    (microsoft.public.dotnet.framework.aspnet.security)