Interested to Buy Any Domain ? << Click Here >> for more details...
Do ASP.NET forms authentication cookies provide any protection against replay attacks? Do they, for example, include the client's IP address or anything else that would distinguish the real client from an attacker?
- 1 Answers
- 1659 Views
- I also Faced
- E-Mail Answers
Answer / surendra singh
No. If an authentication cookie is stolen, it can be used by an attacker. It's up to you to prevent this from happening by using an encrypted communications channel (HTTPS). Authentication cookies issued as session cookies, do, however,include a time-out valid that limits their lifetime. So a stolen session cookie can only be used in replay attacks as long as the ticket inside the cookie is valid. The default time-out interval is 30 minutes.You can change that by modifying the timeout attribute accompanying the <forms> element in Machine.config or a local Web.config file. Persistent authentication cookies do not time-out and therefore are a more serious security threat if stolen.
| Is This Answer Correct ? | 0 Yes | 0 No |
In C#.net application is run on linux michine
What is Difference between Production Serves and Development Servers? And Suppose, m adding/deleting C# file in a project based on the Specific Requirement. These Files are Automatically updated in Production Servers? So Which tool is needed to do This One?
If(dropdownlist1.selectedIndexChanged==true) { //code } else { //code } I am getting error in If condition, so can u pls give me a solution.
How do you validate the controls in an ASP .NET page?
In a Code-Behind class generally which type of code is found ?
Differentiate between structure and class.
Explain difference between dataset and recordset?
what is difference between User Control,Custom Contro1,Web server control and template controls
What is a PostBack ?
What is the lifespan for items stored in ViewState?
code for "For every 5days system has to create 1text file with the corresponding date and it has to store in c-drive" by using web applications
What is difference between masterpage and user control, what is the objective of master page when we had user control in .NET 1.1 version
-
Visual Basic (800) - C Sharp (3816)
- ASP.NET (3180)
- VB.NET (461)
- COM+ (79)
- ADO.NET (717)
- IIS (369)
- MTS (11)
- Crystal Reports (81)
- BizTalk (89)
- Dot Net (2435)
- Exchange Server (362)
- SharePoint (720)
- WCF (340)
- MS Office Microsoft (6963)
- LINQ Language-Integrated Query (317)
- WPF (371)
- TypeScript (144)
- Microsoft Related AllOther (311)
