Re: FormsAuthentication + Protection + Recycling

From: Daniel Fisher\(lennybacon\) (info_at_(removethis)lennybacon.com)
Date: 10/03/04

  • Next message: Martin: "ssl secret key available to asp.net page?" 
    Date: Sun, 3 Oct 2004 19:04:41 +0200

    >> Protection parameter to "None", which works fine, and decryption is
    >> successful.

    sure?

    [...]
    None:
    Specifies that both encryption and validation are disabled for sites that
    are using cookies only for personalization and have weaker security
    requirements. Using cookies in this manner is not recommended; however, it
    is the least resource-intensive way to enable personalization using the .NET
    Framework.
    [...
    from
    http://msdn.microsoft.com/library/default.asp?url=/library/en-us/cpgenref/html/gngrfForms.asp
    ]

    By default IIS 6.0 is configured to recycle its worker process every 29
    hours. If You have problems with recycling it every 10 minutes try to
    recycle it after a defined amount of requests or memory usage...

    (http://www.asp.net/faq/AspNetAndIIS6.aspx)

    Daniel 

    -- 
Daniel Fisher(lennybacon)
 MCP C# ASP.NET
Blog: http://www.lennybacon.com/
  • Next message: Martin: "ssl secret key available to asp.net page?"

    Relevant Pages

    • Re: Whats Wrong With Sessions?
      ... This can be a giant pain as there's a delay during the recycle ... I'm aware of the issue when using kernel cache in IIS 6.0 ... I greatly prefer session variables to cookies for security reasons, ...
      (microsoft.public.dotnet.framework.aspnet)
    • Re: changing registry shell folder
      ... A lot were in recycle. ... then i did a couple of searches to google and back to explorer C:\documents ... Suppose cookies regenerated itself I might have same ... >> So I went into registry and did a change to shell folder and user ...
      (microsoft.public.windows.inetexplorer.ie6.browser)
    • Quantcast