Re: Should I trust on Forms authentication?

From: Gustavo Mateus (gustavo_at_w3it.com.br)
Date: 08/22/03 

Date: Thu, 21 Aug 2003 23:09:29 -0300

Thank you Mary

on this page I found one address that can clear my mind and that I never
saw before. Maybe this can help other people:
http://www.microsoft.com/resources/practices/

Mary Chipman wrote:

> I guess the answer to your question is, "it depends on how you build
> it". You may find the following paper helpful since it fully discusses
> all of the options:
> http://www.microsoft.com/downloads/release.asp?ReleaseID=44047
>
> -- Mary
> MCW Technologies
> http://www.mcwtech.com
>
> On Wed, 20 Aug 2003 20:33:17 -0300, Gustavo Mateus
> <gustavo@w3it.com.br> wrote:
>
>
>>I'm beggining to migrate one of my asp apps to asp.net but i'm stuck at
>>some security issues.
>>My asp application has a custom made auth method (roles, permissions, ip
>>deny, etc) and I'm thinking to mantain the same base on .net, but I
>>don't know why, i'm not feeling safe with the FORMS Authentication.
>>
>>My question is:
>>
>>Is it fully secure for me to build my entire application based on this
>>Authentication?
>>
>>PS. Windows and passport do not combine with the hosting server.
>
>

Loading