If I were to use the login control, create user control, and and password recovery control, how secure would my site be? Is asp.net's built in security more secure than the classic session based security? Are there any articles that ouline this? I've got a dba who says he doesn't believe the built in security is secure enough, and invests too much into asp.net (not enough levels of seperation). Though, I personally think that's retarded. The built in security still uses sessions, and if I were building my own session based security I would be using asp.net to create the session variables anyway.
From the research I've done it looks like the built in security is great, especially the built in membership and roles functionality. I think it'll be much easier to implement and save development time. Know of any articles that point out the pros and cons of asp.net's security?
...
Go to the complete details ...