ASP.NET Configuration Security

[Roham Hossein]

I want to know what is the recommendation for logging in to a Internet/Interanet website? is ASP.NET configuration security model a recommended model vs the custom database tables?

thanks in advance

[Nicholas Paldino [.NET/C# MVP]]

Re: ASP.NET Configuration Security

Roham,

If you already have the users and permissions set up on the intranet
(which you might or might not be exposing to the internet, from what I can
tell), and you know your clients are going to use Internet Explorer, then I
would use Windows Authentication.

You could use plaintext passwords as well if you have a need for
cross-browser compatability, but in that case, you MUST use SSL (https) to
make sure someone isn't sniffing the line.


--
- Nicholas Paldino [.NET/C# MVP]
- mvp@spam.guard. caspershouse.co m

<Roham Hosseinwrote in message news:2008710140 25roham.hossein @gmail.com...

>I want to know what is the recommendation for logging in to a
>Internet/Interanet website? is ASP.NET configuration security model a
>recommended model vs the custom database tables?
>
thanks in advance