Re: Authorization question, w/ "Windows" authentication mode

so why use sliding expiration then??

---------------------------------------
Dominick Baier - DevelopMentor
http://www.leastprivilege.com

except that the keyname for the cached data is based on the unique
userID. since no user will user the application for very long, and the
app has a 20 or 30 minute inactivity timeout, perpetually storing
stale data is not possible.

matt

Dominick wrote:

i wouldn't use sliding expiration - rather choose a longer timeout
and no sliding exp. - this will guarantee you get fresh info after
the timout occured. Otherwise you could keep possible old info alive
forever by repeatedly sending request to the application.



.