My team is debating using Windows Authentication for a public facing website. I’ve been scouring the forms and can see the numerous security vulnerabilities of replying on NTML, and I can see the general advice of “windows authentication for intranet sites and forms authentication for public sites”.

People respect authority. I was hoping to find an MSDN actively which explicitly recommends forms authentication for public sites or whether windows authentication is OK with a list of additional security measures.

Has Microsoft ever made just a recommendation?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.