Which one is better, InProc or SQL Server, for Session State mode in asp.net?
I am developing an ASP.NET website. I want to know which one is better in session state mode: InProc or SQL Server? I need to hear about your experiences on this issue. Another question is about cookieless attribute. Is there any security hole in my site if I set it to true? In all the samples I saw in MSDN site, this attribute was set to false. And the last question is about Timeout attribute. Does this attribute effect my sessions lifetime when I set it to InProc mode? Better in terms of what? InProc session is much much faster, has less requirements (serialization), but unusable when you're