Encryption keys for cookies and https

  • Thread starter Thread starter Randall Parker
  • Start date Start date
R

Randall Parker

Some basic security questions:

1) Is there any difference in the sort of encryption keys needed for encrypted
cookies versus for https connections?

2) Does one need encrypted cookies for people who log on to a site using forms
authentication?
 
Http-encryption (SSL/HTTPS) uses certificats. cookie do not.

The FormsAuthentication cookies value is an encrypted ticket.

Cheers,
 
You must log in or register to reply here.

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Encrypted file upload using the FileUpload control and HTTPS 1
Forms authentication cookie handling question (C#) 4
Non persistent cookie timeout? 8
Encryption Key/Cache 2
descript string using classic asp ? 1
What relationship between cookie and ticket expiration? 2
Mint used by terrorist in cufflink !!!! 0
3-Tier Web Application, forms authentication, persistence of user 4

Back
Top