2

I want to ensure that the sessionid in asp.net have at least 128 bits.

Does anyone know how many bits the ASP.NET_SessionId have?

Can you find it somewhere in IIS?

शेखर
  • 17,412
  • 13
  • 61
  • 117
  • why do you want to do so? [HTTPContext.Current.Session.SessionID](http://stackoverflow.com/questions/1368403/generating-a-new-asp-net-session-in-the-current-httpcontext) – शेखर Jan 11 '13 at 09:05

1 Answers1

1

ASP.NET uses an 120 bit identifier to track each session.

You can read the following articles.
http://support.microsoft.com/kb/899918/en-us
http://www.codeproject.com/Articles/32545/Exploring-Session-in-ASP-Net
http://www.codeproject.com/Articles/7182/Session-management-options-in-ASP-NET

Kadir
  • 3,094
  • 4
  • 37
  • 57