If I setup Forms Authentication with:
<authentication mode="Forms">
<forms loginUrl="/MyLogin/Index" timeout="2880"
and IIS has Idle Time Out set to 20
Will re-authentication be required after 20 minutes?
I do not have the Machine or Encryption key set. I do not use Session variables.
I was thinking that IIS encrypts the cookie probably with the Machine Key and
MAYBE a salt. So if IIS resets after 20 the cookie would be invalid?
If set my own Machine Key and Encryption key maybe the cookie would be good????
Go to the complete details ...