FormsAuthenticationConfiguration.Protection Property
.NET Framework 4.5
Gets or sets the encryption type used to encrypt the cookie.
Namespace: System.Web.Configuration
Assembly: System.Web (in System.Web.dll)
[ConfigurationPropertyAttribute("protection", DefaultValue = FormsProtectionEnum.All)] public FormsProtectionEnum Protection { get; set; }
Property Value
Type: System.Web.Configuration.FormsProtectionEnumOne of the FormsProtectionEnum enumeration values. The default value is All.
Note Be sure to use the default value for this property if you want both data validation and encryption to help protect the cookie. This option uses the configured data-validation algorithm based on the machineKey. Triple-DES (3DES) is used for encryption, if available and if the key is long enough (48 bytes or more).
To improve the protection of your cookie, you may also want to set the RequireSSL to true.
The following code example shows how to access the Protection property. Refer to the code example in the FormsAuthenticationConfiguration class topic to learn how to get the section.
Windows 8, Windows Server 2012, Windows 7, Windows Vista SP2, Windows Server 2008 (Server Core Role not supported), Windows Server 2008 R2 (Server Core Role supported with SP1 or later; Itanium not supported)
The .NET Framework does not support all versions of every platform. For a list of the supported versions, see .NET Framework System Requirements.