ASP.NET Configuration Security

[Roham Hossein]

I want to know what is the recommendation for logging in to a Internet/Interanet website? is ASP.NET configuration security model a recommended model vs the custom database tables?

thanks in advance

 

[Nicholas Paldino [.NET/C# MVP]]

Roham,

If you already have the users and permissions set up on the intranet
(which you might or might not be exposing to the internet, from what I can
tell), and you know your clients are going to use Internet Explorer, then I
would use Windows Authentication.

You could use plaintext passwords as well if you have a need for
cross-browser compatability, but in that case, you MUST use SSL (https) to
make sure someone isn't sniffing the line.