CODEWITHSUNDEEP
c#asp.netasp.net-mvcsessioncookieless
Regfor
Regfor

Reputation: 8101

Will be ASP.NET cookieless sessions support in future deprecated

Does anybody know about support of cookieless session in current and next versions of ASP.NET or ASP.NET MVC?

They say that cookieless session aren't recommended (that is clear why) and are deprecated. But I can't find any official confirmation, any like from Microsoft web sites, or ASP.NET blogs, roadmaps or anything official.

Upvotes: 0

Views: 532

Answers (1)

Roman Mik
Roman Mik

Reputation: 3279

I am not sure where you heard about cookieless beind deprecated. If you can remember the article, please share.

Cookieless, as the name implies, is the last resort when the client does not allow cookies. It is used to authenticate the client. It is not secure and is not recommended for Internet Web Sites. I guess, It could be OK for secured networks (i.e. internal web sites). However, even there you should think about forcing cookies and use other security measures.

http://www.asp.net/aspnet/overview/web-development-best-practices/what-not-to-do-in-aspnet,-and-what-to-do-instead#cookieless

Upvotes: 0

Related Questions