As I understand it, the Forms Authentication cookie is encrypted, signed, hashed, etc. If my website relied on the username of the cookie to get the active user, how secure would my website be?
I wanted to know if anyone has read or seen anything about this system being broken.
...
Go to the complete details ...