Decrypt / Encrypt Session objects

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

Stefan - 29 Aug 2003 05:52 GMT

Hi!
I just want to know if it's common to decrypt a Session-Object in a
ASP.NET application.
My collegue says that I have not do this because the information is
stored on the server.
Any suggestions?

Reply to this Message

Charlie Nilsson [MSFT] - 30 Aug 2003 00:07 GMT

Yup, a Session object is stored on a server, and not in a client's browser
(cookies). As usual, take security precautions anyways if you feel the
need.

Charlie Nilsson [msft]
Visual Studio Update

Signature

This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to this
message are best directed to the newsgroup/thread from which they
originated.
--------------------

> Reply-To: "Stefan" <shogun@steffsworld.ch>
> From: "Stefan" <shogun@steffsworld.ch>
[quoted text clipped - 10 lines]
> Path: cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP09.phx.gbl
> Xref: cpmsftngxa06.phx.gbl

microsoft.public.dotnet.framework.aspnet.security:6463

> X-Tomcat-NG: microsoft.public.dotnet.framework.aspnet.security
>
[quoted text clipped - 4 lines]
> stored on the server.
> Any suggestions?

Reply to this Message

Decrypt / Encrypt Session objects

Free Magazines