Hi,
I'm trying to create a secure method of sending a confirmation email to users. I've seen various articles (such as http://aspnet.4guysfromrolla.com/articles/062508-1.aspx) and they seem to include the user GUID directly in the confirmation line. I don't like the idea of user's being able to see their own or, more importantly, other people's GUID. What would be the best, and most efficient, way of getting past this? The system doesn't have to have government security, but I'd like to make it slightly less easy to gain access to backend information. I'm thinking that a hash/encryption of the GUID could be used in the URL and decrypted server side. If so, what would be the fastest method to go for, but would also be difficult to decrypt? Is this a good way of going about things, or would it be too expensive on a large scale?
Thanks for any ...
Go to the complete details ...