RE: Decrypt / Encrypt Session objects

From: Charlie Nilsson [MSFT] (CharlieNilsson_CUTOUT__at_hotmail.com)
Date: 08/30/03

  • Next message: STom: "Passing Security Context to remote objects" 
    Date: Fri, 29 Aug 2003 23:07:58 GMT

    Yup, a Session object is stored on a server, and not in a client's browser
    (cookies). As usual, take security precautions anyways if you feel the
    need.

    Charlie Nilsson [msft]
    Visual Studio Update 

    -- 
This posting is provided "AS IS" with no warranties, and confers no rights. 
Use of included script samples are subject to the terms specified at 
http://www.microsoft.com/info/cpyright.htm 
Note:  For the benefit of the community-at-large, all responses to this 
message are best directed to the newsgroup/thread from which they 
originated.  
--------------------
> Reply-To: "Stefan" <shogun@steffsworld.ch>
> From: "Stefan" <shogun@steffsworld.ch>
> Subject: Decrypt / Encrypt Session objects
> Date: Fri, 29 Aug 2003 06:52:09 +0200
> Lines: 8
> X-Priority: 3
> X-MSMail-Priority: Normal
> X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
> Message-ID: <eMEzQlebDHA.2588@TK2MSFTNGP09.phx.gbl>
> Newsgroups: microsoft.public.dotnet.framework.aspnet.security
> NNTP-Posting-Host: 157.161.65.14
> Path: cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP09.phx.gbl
> Xref: cpmsftngxa06.phx.gbl 
microsoft.public.dotnet.framework.aspnet.security:6463
> X-Tomcat-NG: microsoft.public.dotnet.framework.aspnet.security
> 
> Hi!
> I just want to know if it's common to decrypt a Session-Object in a
> ASP.NET application.
> My collegue says that I have not do this because the information is
> stored on the server.
> Any suggestions?
> 
> 
>
  • Next message: STom: "Passing Security Context to remote objects"

    Relevant Pages

    • Re: session object II
      ... i wanna write chat application server using asp. ... Clients will use exe file. ... > You cannot use the session object to accurately determine if a user is ... >> file and when i cut the connection then can it write offline to the same ...
      (microsoft.public.dotnet.framework.aspnet)
    • Re: Session_OnEnd doesnt get called when shutting down a browser
      ... yeah - i was thinking about just that - a server side probe. ... setting a shorter timeout on the session object won't help - the application ... >> client side scripting. ...
      (microsoft.public.inetserver.asp.general)
    • June CTP Analysis Services project Deployment issue
      ... I'm having trouble with the following with June CTP of SQL Server 2005: ... deploying even a simple Analysis services project). ... creating a session object, the session object must be dropped before ...
      (microsoft.public.sqlserver.datamining)
    • Re: Share objects between processes - how?
      ... I have a client app made ... This server forks a process per product type. ... can run different perl scripts for each PT. ... Is the session object actually *shared* between processes? ...
      (comp.lang.perl.misc)