Do ASP.NET forms authentication cookies provide any protection against replay attacks? Do they, for example, include the client's IP address or anything else that would distinguish the real client from an attacker?
Answer / surendra singh
No. If an authentication cookie is stolen, it can be used by an attacker. It's up to you to prevent this from happening by using an encrypted communications channel (HTTPS). Authentication cookies issued as session cookies, do, however,include a time-out valid that limits their lifetime. So a stolen session cookie can only be used in replay attacks as long as the ticket inside the cookie is valid. The default time-out interval is 30 minutes.You can change that by modifying the timeout attribute accompanying the <forms> element in Machine.config or a local Web.config file. Persistent authentication cookies do not time-out and therefore are a more serious security threat if stolen.
| Is This Answer Correct ? | 0 Yes | 0 No |
wt is repeater control and wt is datalist control and wt defferences these two? i want some code in datalist?
What are sql notifications and sql invalidations?
How to display Alert in ASP.NET
what is use of doctype tag in asp.net
Where is the session stored?
If you are using components in your application, how can you handle exceptions raised in a component?
what is view state
5 Answers Microsoft, Siebel Systems,
Do I need to have the latest version of windows media player installed?
Why do I get error message "could not load type" whenever I browse to my asp.net web site?
How to migrate from sqlserver 2005 to sql server 2000 (every one know reverse process of that )
What is base class of .net?
I have a component with 3 parameter and deployed to client side now i changed my dll method which takes 4 parameter.How can i deploy this without affecting the clent?s code ?
1 Answers Microsoft, Satyam, Wipro,
Visual Basic (800)
C Sharp (3816)
ASP.NET (3180)
VB.NET (461)
COM+ (79)
ADO.NET (717)
IIS (369)
MTS (11)
Crystal Reports (81)
BizTalk (89)
Dot Net (2435)
Exchange Server (362)
SharePoint (720)
WCF (340)
MS Office Microsoft (6963)
LINQ Language-Integrated Query (317)
WPF (371)
TypeScript (144)
Microsoft Related AllOther (311)