Decrypt / Encrypt Session objects

[Stefan]

Hi!
I just want to know if it's common to decrypt a Session-Object in a
ASP.NET application.
My collegue says that I have not do this because the information is
stored on the server.
Any suggestions?

 

[Charlie Nilsson [MSFT]]

Yup, a Session object is stored on a server, and not in a client's browser
(cookies). As usual, take security precautions anyways if you feel the
need.


Charlie Nilsson [msft]
Visual Studio Update

--

This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to this
message are best directed to the newsgroup/thread from which they
originated.
--------------------