I\'m updating my website at the moment and figure that if I am to update my login/security mode, now is a good time.
I have looked through the Membership model whic
The Membership route works well BUT there is one fatal flaw and I do not blame Microsoft for it.
Internet Explorer is the only browser that properly disposes of the authentication cache.
You can close a Firefox browser, open it and then restore that last session and go right back into your "secure" website without logging in. Chrome has similar issues and anything Mac does the same.
IE has a javascript call that handles this correctly: document.execCommand("ClearAuthenticationCache", "false");
It does not work with any other browser. If you use this you need to force users to use IE.