Special Edition Using® Microsoft® ASP.NET

ASP.NET Security

This section talks about adding security to your Web applications by taking advantage of the mechanisms that ASP.NET provides. The three types that are currently implemented are forms (sometimes referred to as cookie authentication), Windows(which we have already covered in our discussion of NTLM and Kerberos), file and URL authorization, and passport.

Forms Authentication

Forms authentication, sometimes referred to as cookie authentication, is used to authenticate requests to HTML content based on credentials a user provides. For example, a user might be able to access a Web site, but access to a “Members Only” link might be restricted unless the proper credentials are given. The credentials usually are a username and password ...