My team is debating using Windows Authentication for a public facing website. I’ve been scouring the forms and can see the numerous security vulnerabilities of replying on NTML, and I can see the general advice of “windows authentication for intranet sites and forms authentication for public sites”.
People respect authority. I was hoping to find an MSDN actively which explicitly recommends forms authentication for public sites or whether windows authentication is OK with a list of additional security measures.
Has Microsoft ever made just a recommendation?