This post originated from an RSS feed registered with .NET Buzz
by Robert Hurlbut.
Original Post: Session Hijacking article
Feed Title: Robert Hurlbut's .Net Blog
Feed URL: http://www.asp.net/err404.htm?aspxerrorpath=/rhurlbut/Rss.aspx
Feed Description: Development with .Net, Rotor, Distributed Architectures, Security, Extreme Programming, and Databases
Jeff Prosise has an article posted this month in MSDN Magazine on “Foiling Session Hijacking Attempts”. I was talking about this issue with a friend last week, so this is very timely. If you want to protect against session cookie information being stolen from your ASP.NET website, give Jeff's solution a try.