Question about formsAuthentication

Hi,



I read some topics about forms authentication, but I am not quite sure how it works.



In my website, I use FormsAuthenticationTicket to create a ticket when user log in with right username and right password. Then I encrypt the ticket with FormsAuthentication.Encrypt() method, and add the encrypted ticket to a cookie, and add the cookie to Response.Cookies.



I have some questions about this working flow.



1) What is the difference between my way and FormsAuthentication.SetAuthCookie() method? Well, I did not see any encrypt happens in FormsAuthentication.SetAuthCookie() method, I do not know how to encrypt here.



2) We know there is a hack by using fake cookie to attack server, as I described above, I encrypt cookie, can hacker still attack server by using fake cookie?



3) This is the way to set authenticated cookie, I am not sure how to use it. In my case, I log user in at login.aspx page, then ...