Encryption keys for cookies and https

[Randall Parker]

Some basic security questions:

1) Is there any difference in the sort of encryption keys needed for encrypted
cookies versus for https connections?

2) Does one need encrypted cookies for people who log on to a site using forms
authentication?

 

[Daniel Fisher\(lennybacon\)]

Http-encryption (SSL/HTTPS) uses certificats. cookie do not.

The FormsAuthentication cookies value is an encrypted ticket.

Cheers,