Ask a Question related to ASP.NET Security, Design and Development.
-
Gustavo Mateus #1
Re: Should I trust on Forms authentication?
Thank you Mary
on this page I found one address that can clear my mind and that I never
saw before. Maybe this can help other people:
[url]http://www.microsoft.com/resources/practices/[/url]
Mary Chipman wrote:
> I guess the answer to your question is, "it depends on how you build
> it". You may find the following paper helpful since it fully discusses
> all of the options:
> [url]http://www.microsoft.com/downloads/release.asp?ReleaseID=44047[/url]
>
> -- Mary
> MCW Technologies
> [url]http://www.mcwtech.com[/url]
>
> On Wed, 20 Aug 2003 20:33:17 -0300, Gustavo Mateus
> <gustavo@w3it.com.br> wrote:
>
>>>>I'm beggining to migrate one of my asp apps to asp.net but i'm stuck at
>>some security issues.
>>My asp application has a custom made auth method (roles, permissions, ip
>>deny, etc) and I'm thinking to mantain the same base on .net, but I
>>don't know why, i'm not feeling safe with the FORMS Authentication.
>>
>>My question is:
>>
>>Is it fully secure for me to build my entire application based on this
>>Authentication?
>>
>>PS. Windows and passport do not combine with the hosting server.
>Gustavo Mateus Guest
-
WS-Security vs. IIS authentication and trust boundaries
Hi Sirs. When using WS-Security instead of IIS authentication I see a potential problem letting ALL people access my webService. ie. if I have a... -
Accessing htm files without authentication (forms authentication)
I have application with forms authentication. All works fine. When user opens .aspx file gets login form, login and then get the .aspx page. But... -
ASP.Net Forms authentication with basic authentication popup
Relatively new to ASP.Net but have a strange problem. My site uses forms authentication for a large administration section however after the user... -
Forms authentication then redirection to a secure web with NT authentication?
Hi, I want to allow access to particular secured intranet web sites. These intranet are stored in sharepoint (2003 version) Actually I've... -
Authentication ticket, cookieless, forms authentication?
Hi. I want to use Forms Authentication, cookieless. The issue is setting the Authentication Ticket without using cookies (!) That is, the...



Reply With Quote

