Home/ Questions/Q 6653161
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-26T01:14:05+00:00

I’m looking to put SSL into place to prevent cookie replay attacks on our

  • 0

I’m looking to put SSL into place to prevent cookie replay attacks on our site.

The site is using .NET forms authentication. Do I just need to enable SSL for the login page or would it be every page behind the forms authentication that needs to be secure?

THanks

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    You would need to enable SSL for every page where the browser is instructed to send the authentication ticket cookie. By default, that would mean every page on your website, although when writing the cookie to the browser you can instruct it to only send it over HTTPS or to limit it to certain paths.

    But in general it would mean SSL protecting every page on your site, not just your sign in page.

    • 0