asp.net forms authentification security issues

Question

Hi there,

I have a kind of asp.net forms authentication with the code like that:

FormsAuthentication.SetAuthCookie(account.Id.ToString(), true);
HttpContext.Current.User = new GenericPrincipal(new GenericIdentity(account.Id.ToString()), null);

What kind of additional efforts shall I take to make authentication cookie (that is user id) more securable? (https, encoding for example)

Thank you in advance!

Answer 1

To get high security you should enable ssl in your web.config: