Tuesday, January 26, 2010

Secure HTTP cookie

If you are using SSL with your site, which you must in order to use an SSL cookie, then add the following line in your web.config, inside the <system.web> tag:

<httpCookies httpOnlyCookies="false" requireSSL="true" />

http://forums.asp.net/p/1242647/2275159.aspx#2275159

No comments: