Dear All,
I am curious to know about the best Industry Standard asp.net Authentication practice. I have learned these two so far.
1. Form Authentication Ticket with Cookie
2. Session Variables
I have developed applications using Form Authentication Ticket with cookie but if browser doesn't support cookie then the application does not authenticate. Though I had no problems using session but I cant find difference in initiating a Authentication Ticket or put user information in session variables and access throughout application.
Well I want experts to give me suggestions which practice is best in context of Reliability, Security & Performance and what are the Pros & Cons of the above two so I can learn and write industry standard programs. If there is another practice please suggest that also.
Regards
...
Go to the complete details ...