can some hacker steal the cookie from a user and login with that name on the web site ?
- by Aristos
Reading this question
different users get the same cookie value in aspxanonymous
and search for a solution, I start thinking, if it is possible for some one to really steal the cookie with some way, and then place it on his browser and login lets say as administrator.
Do you know how form authentication can ensure that even if the cookie is stoled, the hacker not actual login using it ?
Or do you know any other automatic defense mechanism ?
Thank you in advanced.