The undocumented "standard" for this has become 20 minutes for your average site. If you've got secure info, say a bank or other site which contains highly sensitive information, this would be shorter, 10 minutes for some or even as little as 5. On yet other sites which have nothing really...
Posted to
State Management
(Forum)
by
bipro
on
10-29-2008, 12:00 AM
Filed under: Session, session end, Session Management, Session object, session state timeout, session time out, session timeout, session.end, Session_End, sessions, HttpModule, IHttpModule, session expires, session state management, SessionState, HttpModules, IIS, Session State