<?xml version="1.0" encoding="UTF-8" ?>
<?xml-stylesheet type="text/xsl" href="http://forums.asp.net/utility/FeedStylesheets/rss.xsl" media="screen"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" xmlns:wfw="http://wellformedweb.org/CommentAPI/"><channel><title>Security</title><link>http://forums.asp.net/25.aspx</link><description>All about ASP.NET security (authentication, authorization, membership, roles, etc.) and the Login controls. &lt;a href="http://aspadvice.com/SignUp/list.aspx?l=24&amp;c=17" target="_blank"&gt;Email List&lt;/a&gt;</description><dc:language>en</dc:language><generator>CommunityServer 2007 SP1 (Build: 20510.895)</generator><item><title>Re: Can I use the Algorithm of myself?</title><link>http://forums.asp.net/thread/3440709.aspx</link><pubDate>Mon, 05 Oct 2009 10:56:51 GMT</pubDate><guid isPermaLink="false">4c671506-2930-414c-a40b-8bf57ded5924:3440709</guid><dc:creator>vishwaraj1</dc:creator><author>vishwaraj1</author><slash:comments>0</slash:comments><comments>http://forums.asp.net/thread/3440709.aspx</comments><wfw:commentRss>http://forums.asp.net/commentrss.aspx?SectionID=25&amp;PostID=3440709</wfw:commentRss><description>&lt;p&gt;how can I encrypt the querystring like gmail. means the value should be long like gmail. i also have to decrypt later on the other page.&lt;/p&gt;&lt;p&gt;Thanks in advance&lt;/p&gt;</description></item><item><title>Re: Can I use the Algorithm of myself?</title><link>http://forums.asp.net/thread/3440576.aspx</link><pubDate>Mon, 05 Oct 2009 09:33:18 GMT</pubDate><guid isPermaLink="false">4c671506-2930-414c-a40b-8bf57ded5924:3440576</guid><dc:creator>vishwaraj1</dc:creator><author>vishwaraj1</author><slash:comments>0</slash:comments><comments>http://forums.asp.net/thread/3440576.aspx</comments><wfw:commentRss>http://forums.asp.net/commentrss.aspx?SectionID=25&amp;PostID=3440576</wfw:commentRss><description>&lt;p&gt;&lt;/p&gt;&lt;div style="position:absolute;left:-10000px;top:0px;width:1px;height:1px;overflow-x:hidden;overflow-y:hidden;" id="_mcePaste"&gt;what is the use of Decrypting the password.&lt;/div&gt;
&lt;div style="position:absolute;left:-10000px;top:0px;width:1px;height:1px;overflow-x:hidden;overflow-y:hidden;" id="_mcePaste"&gt;You can generate the new passowrd guid Guid or random no. and the use Substring() to takes its some character ans then encrypt it and update the old password with this new password.&lt;/div&gt;
&lt;div style="position:absolute;left:-10000px;top:0px;width:1px;height:1px;overflow-x:hidden;overflow-y:hidden;" id="_mcePaste"&gt;Then send that substring() value the user.&lt;/div&gt;
&lt;div style="position:absolute;left:-10000px;top:0px;width:1px;height:1px;overflow-x:hidden;overflow-y:hidden;" id="_mcePaste"&gt;He can change it later.&lt;/div&gt;&lt;p&gt;&lt;p&gt;what is the use of Decrypting the password.&lt;/p&gt;&lt;p&gt;You can generate the new passowrd guid Guid or random no. and the use Substring() to takes its some character ans then encrypt it and update the old password with this new password.&lt;/p&gt;&lt;p&gt;Then send that substring() value the user.&lt;/p&gt;&lt;p&gt;He can change it later.&lt;/p&gt;&lt;/p&gt;&lt;p&gt;&lt;/p&gt;</description></item><item><title>Re: Can I use the Algorithm of myself?</title><link>http://forums.asp.net/thread/3430456.aspx</link><pubDate>Tue, 29 Sep 2009 06:37:28 GMT</pubDate><guid isPermaLink="false">4c671506-2930-414c-a40b-8bf57ded5924:3430456</guid><dc:creator>KumarHarsh</dc:creator><author>KumarHarsh</author><slash:comments>0</slash:comments><comments>http://forums.asp.net/thread/3430456.aspx</comments><wfw:commentRss>http://forums.asp.net/commentrss.aspx?SectionID=25&amp;PostID=3430456</wfw:commentRss><description>&lt;p&gt;&amp;nbsp;Hi,&lt;br /&gt;&lt;br /&gt;Ignore my answer.&lt;/p&gt;</description></item><item><title>Re: Can I use the Algorithm of myself?</title><link>http://forums.asp.net/thread/3430452.aspx</link><pubDate>Tue, 29 Sep 2009 06:33:18 GMT</pubDate><guid isPermaLink="false">4c671506-2930-414c-a40b-8bf57ded5924:3430452</guid><dc:creator>KumarHarsh</dc:creator><author>KumarHarsh</author><slash:comments>0</slash:comments><comments>http://forums.asp.net/thread/3430452.aspx</comments><wfw:commentRss>http://forums.asp.net/commentrss.aspx?SectionID=25&amp;PostID=3430452</wfw:commentRss><description>&lt;p&gt;&amp;nbsp;Hi,&lt;br /&gt;&lt;br /&gt;we can always decrypt the password by the encrypt-decrypt method we using.&lt;br /&gt;So in forgot password case,we can apply decrypt method to send same password.&lt;/p&gt;
&lt;p&gt;&amp;nbsp;&lt;/p&gt;
&lt;p&gt;&lt;br /&gt;&amp;nbsp;&lt;/p&gt;</description></item><item><title>Re: Can I use the Algorithm of myself?</title><link>http://forums.asp.net/thread/3312627.aspx</link><pubDate>Sat, 25 Jul 2009 16:22:26 GMT</pubDate><guid isPermaLink="false">4c671506-2930-414c-a40b-8bf57ded5924:3312627</guid><dc:creator>itsumapathyk</dc:creator><author>itsumapathyk</author><slash:comments>0</slash:comments><comments>http://forums.asp.net/thread/3312627.aspx</comments><wfw:commentRss>http://forums.asp.net/commentrss.aspx?SectionID=25&amp;PostID=3312627</wfw:commentRss><description>&lt;p&gt;Yes. You can&amp;nbsp;user your own algorithm, but when you use standard , proven one then it will be much safer.&lt;/p&gt;</description></item><item><title>Re: Authentication and Authorization Query?</title><link>http://forums.asp.net/thread/3219618.aspx</link><pubDate>Tue, 09 Jun 2009 08:46:57 GMT</pubDate><guid isPermaLink="false">4c671506-2930-414c-a40b-8bf57ded5924:3219618</guid><dc:creator>lucasstark</dc:creator><author>lucasstark</author><slash:comments>0</slash:comments><comments>http://forums.asp.net/thread/3219618.aspx</comments><wfw:commentRss>http://forums.asp.net/commentrss.aspx?SectionID=25&amp;PostID=3219618</wfw:commentRss><description>&lt;p&gt;&amp;nbsp;You can put a webconfig inside of a specific directory to control authorization for that particular directory.&amp;nbsp; You can also use &amp;lt;location&amp;gt; tags in the main web.config to get the same result.&amp;nbsp; I&amp;#39;m not sure about having each subdirectory have it&amp;#39;s own login page.&amp;nbsp; You could try setting the loginUrl=&amp;quot;Login.aspx&amp;quot; on the forms auth tag, so that it is pointed releative to the webconfig. &lt;/p&gt;&lt;p&gt;&amp;nbsp;&lt;/p&gt;&lt;p&gt;&amp;nbsp;&lt;/p&gt;</description></item><item><title>Authentication and Authorization Query?</title><link>http://forums.asp.net/thread/3219397.aspx</link><pubDate>Tue, 09 Jun 2009 07:03:24 GMT</pubDate><guid isPermaLink="false">4c671506-2930-414c-a40b-8bf57ded5924:3219397</guid><dc:creator>Nivrutti.Lokhande</dc:creator><author>Nivrutti.Lokhande</author><slash:comments>0</slash:comments><comments>http://forums.asp.net/thread/3219397.aspx</comments><wfw:commentRss>http://forums.asp.net/commentrss.aspx?SectionID=25&amp;PostID=3219397</wfw:commentRss><description>&lt;p&gt;Can I put web.config file in subdirectories ? Because I want to assign authentication to directories pages and for unauthorised users it should point to the respective login page of that directory.&lt;/p&gt;</description></item><item><title>Re: MD5 Encryption</title><link>http://forums.asp.net/thread/2762760.aspx</link><pubDate>Sun, 23 Nov 2008 16:25:42 GMT</pubDate><guid isPermaLink="false">4c671506-2930-414c-a40b-8bf57ded5924:2762760</guid><dc:creator>MisterFantastic</dc:creator><author>MisterFantastic</author><slash:comments>0</slash:comments><comments>http://forums.asp.net/thread/2762760.aspx</comments><wfw:commentRss>http://forums.asp.net/commentrss.aspx?SectionID=25&amp;PostID=2762760</wfw:commentRss><description>&lt;p&gt;&amp;nbsp;Hi ,&lt;/p&gt;&lt;p&gt;&amp;nbsp;Can you please tell whats the&amp;nbsp; whole forum is about ? These terms ar new for me.Please help .&lt;/p&gt;&lt;p&gt;Thanks &lt;br /&gt;&lt;/p&gt;</description></item><item><title>MD5 Encryption</title><link>http://forums.asp.net/thread/2759572.aspx</link><pubDate>Fri, 21 Nov 2008 06:46:23 GMT</pubDate><guid isPermaLink="false">4c671506-2930-414c-a40b-8bf57ded5924:2759572</guid><dc:creator>raju dasa</dc:creator><author>raju dasa</author><slash:comments>0</slash:comments><comments>http://forums.asp.net/thread/2759572.aspx</comments><wfw:commentRss>http://forums.asp.net/commentrss.aspx?SectionID=25&amp;PostID=2759572</wfw:commentRss><description>&lt;p&gt;Nice Article. &lt;/p&gt;</description></item><item><title>Re: Can I use the Algorithm of myself?</title><link>http://forums.asp.net/thread/2606157.aspx</link><pubDate>Mon, 08 Sep 2008 06:42:29 GMT</pubDate><guid isPermaLink="false">4c671506-2930-414c-a40b-8bf57ded5924:2606157</guid><dc:creator>rambhopalreddy</dc:creator><author>rambhopalreddy</author><slash:comments>0</slash:comments><comments>http://forums.asp.net/thread/2606157.aspx</comments><wfw:commentRss>http://forums.asp.net/commentrss.aspx?SectionID=25&amp;PostID=2606157</wfw:commentRss><description>&lt;p&gt;&amp;nbsp;you can write your own encrypt code which you can handle MD5 and SHA1 does not have decrypt better to write your own byte code to encrpt/decrypt. :)&lt;br /&gt;&lt;/p&gt;</description></item><item><title>Re: Can I use the Algorithm of myself?</title><link>http://forums.asp.net/thread/2537900.aspx</link><pubDate>Tue, 05 Aug 2008 15:02:11 GMT</pubDate><guid isPermaLink="false">4c671506-2930-414c-a40b-8bf57ded5924:2537900</guid><dc:creator>dotnetjo</dc:creator><author>dotnetjo</author><slash:comments>0</slash:comments><comments>http://forums.asp.net/thread/2537900.aspx</comments><wfw:commentRss>http://forums.asp.net/commentrss.aspx?SectionID=25&amp;PostID=2537900</wfw:commentRss><description>&lt;p&gt;I dont think that will cereate an issue&lt;/p&gt;</description></item><item><title>Re: Can I use the Algorithm of myself?</title><link>http://forums.asp.net/thread/2246571.aspx</link><pubDate>Fri, 21 Mar 2008 03:29:38 GMT</pubDate><guid isPermaLink="false">4c671506-2930-414c-a40b-8bf57ded5924:2246571</guid><dc:creator>lesonfu</dc:creator><author>lesonfu</author><slash:comments>0</slash:comments><comments>http://forums.asp.net/thread/2246571.aspx</comments><wfw:commentRss>http://forums.asp.net/commentrss.aspx?SectionID=25&amp;PostID=2246571</wfw:commentRss><description>&lt;p&gt;&amp;nbsp;I want to form login with 3 level, can you help me? By C#.&lt;br /&gt;&lt;/p&gt;</description></item><item><title>Re: Can I use the Algorithm of myself?</title><link>http://forums.asp.net/thread/2062798.aspx</link><pubDate>Mon, 17 Dec 2007 05:45:24 GMT</pubDate><guid isPermaLink="false">4c671506-2930-414c-a40b-8bf57ded5924:2062798</guid><dc:creator>sim_sai</dc:creator><author>sim_sai</author><slash:comments>0</slash:comments><comments>http://forums.asp.net/thread/2062798.aspx</comments><wfw:commentRss>http://forums.asp.net/commentrss.aspx?SectionID=25&amp;PostID=2062798</wfw:commentRss><description>&lt;p&gt;&lt;font color="#000080"&gt;Can I use the Algorithm of mine?&lt;/font&gt;&lt;/p&gt;
&lt;p&gt;&lt;font color="#000080"&gt;for example&lt;/font&gt;&lt;/p&gt;
&lt;p&gt;&lt;font color="#000080"&gt;using md5 and Other algorithms when ENCRYPTING the password?&lt;/font&gt;&lt;/p&gt;
&lt;p&gt;&lt;font color="#000080"&gt;just an idea! but i don;t know whether it can be used&lt;img src="http://forums.asp.net/emoticons/emotion-3.gif" alt="Surprise" /&gt;&lt;/font&gt;&lt;/p&gt;</description></item><item><title>Re: Can I use the Algorithm of myself?</title><link>http://forums.asp.net/thread/1786610.aspx</link><pubDate>Wed, 04 Jul 2007 09:56:44 GMT</pubDate><guid isPermaLink="false">4c671506-2930-414c-a40b-8bf57ded5924:1786610</guid><dc:creator>GeorgeZ</dc:creator><author>GeorgeZ</author><slash:comments>0</slash:comments><comments>http://forums.asp.net/thread/1786610.aspx</comments><wfw:commentRss>http://forums.asp.net/commentrss.aspx?SectionID=25&amp;PostID=1786610</wfw:commentRss><description>&lt;p&gt;Just see a person is asking: http://channel9.msdn.com/ShowPost.aspx?PostID=166168&lt;/p&gt;&lt;p&gt;So can I call membership provider the similar way using Assembly or COM wrapper. &lt;/p&gt;&lt;p&gt;&amp;nbsp;&lt;/p&gt;&lt;p&gt;best regs.&amp;nbsp;&amp;nbsp;&lt;/p&gt;</description></item><item><title>Re: Can I use the Algorithm of myself?</title><link>http://forums.asp.net/thread/1660600.aspx</link><pubDate>Wed, 11 Apr 2007 10:02:58 GMT</pubDate><guid isPermaLink="false">4c671506-2930-414c-a40b-8bf57ded5924:1660600</guid><dc:creator>Zhao Ji Ma - MSFT</dc:creator><author>Zhao Ji Ma - MSFT</author><slash:comments>0</slash:comments><comments>http://forums.asp.net/thread/1660600.aspx</comments><wfw:commentRss>http://forums.asp.net/commentrss.aspx?SectionID=25&amp;PostID=1660600</wfw:commentRss><description>&lt;p&gt;Hi Darksat,&amp;nbsp;&lt;/p&gt;
&lt;p&gt;It is recommend using other algorithms instead, such as &lt;a class="" href="http://msdn2.microsoft.com/en-us/library/system.security.cryptography.sha1.aspx"&gt;SHA&lt;/a&gt;. &lt;/p&gt;</description></item></channel></rss>