Security Fundamentals

Abstract

Ordinarily, your ASP.NET website is available to anyone who connects to your web server, whether over a local network or the Internet. Although this is ideal for many web applications (and it suits the original spirit of the Internet), it isn’t always an appropriate design choice. For example, an ecommerce site needs to provide a secure shopping experience to attract customers. A subscriptionbased site needs to limit content to extract a fee. And even a wide-open public site may provide some resources or features that shouldn’t be available to all users.