How to secure the ASP.NET_SessionId cookie?

后端 未结 6 2065
难免孤独
难免孤独 2020-12-02 05:58

I have set the .ASPXAUTH cookie to be https only but I am not sure how to effectively do the same with the ASP.NET_SessionId.

The entire site uses HTTPS so there is

6条回答
  •  独厮守ぢ
    2020-12-02 06:26

    Going with Marcel's solution above to secure Forms Authentication cookie you should also update "authentication" config element to use SSL

    
       
    
    

    Other wise authentication cookie will not be https

    See: http://msdn.microsoft.com/en-us/library/vstudio/1d3t3c61(v=vs.100).aspx

提交回复
热议问题