Hi everyone, I am in the process of developing a subscription based website and use asp. Net's membership as the control over authenticating and logging in users to the members area. However, having read a fair bit on the Internet I find myself worrying about
other aspects of security. In particular I am looking for advice on: (1) is asp.net membership secure enough (2) what do I need to know about session IDs and protecting them - up until now I haven't even considered this and only now concerned with it after
reading articles on the Internet (3) are there any other aspects of security I should be thinking about (eg should my entire site be SSL) I am a self taught developer and therefore have medium technical ability so any dummy's guidance would be appreciated.
Thanks Steven
↧