Re: OT-ish--any existing security vulnerabilities in asp.net 1.1 Forms authentication?
Scott Guthrie <[email protected]>
| Newsgroups | gmane.comp.windows.devel.dotnet.web |
|---|---|
| Message-ID | <677CFAA281B35A48BF00D300D7C0CBB108FB348416@NA-EXMSG-C106.redmond.corp.microsoft.com> |
Hi Roy, There are no known vulnerabilities with ASP.NET's Forms Authentication model (either in ASP.NET 1.x or 2.0). It provides a secure and well tested way handle user authentication - so I'd definitely recommend looking at using it. Hope this helps, Scott -----Original Message----- From: Discussion of building .NET applications targeted for the Web [mailto:[email protected]] On Behalf Of Pardee, Roy Sent: Wednesday, January 17, 2007 1:47 PM To: [email protected] Subject: [DOTNET-WEB] OT-ish--any existing security vulnerabilities in asp.net 1.1 Forms authentication? Hey All, Can anybody advise how I could find out about any existing vulnerabilities in 1.1's Forms authentication? I'm trying to evaluate the wisdom of putting sensitive information on an asp.net based wiki application. Please assume the application does all the right things WRT security. Is there anything that's still waiting on a patch? Thanks! -Roy =================================== This list is hosted by DevelopMentor? http://www.develop.com View archives and manage your subscription(s) at http://discuss.develop.com =================================== This list is hosted by DevelopMentor® http://www.develop.com View archives and manage your subscription(s) at http://discuss.develop.com