I'm developing a web application that is basically for all our employees. Right now we have 3500 employees and all of them will access this web application.
All of them will use really confidential information. Right now I'm thinking how they all will authenticate.
But what is the best way to save login: with Session variable or with cookies?
Or maybe both?
Right now I'm working with ASP.NET and the session variables are saved in a base64 string (maybe this is a little bit more secure but I don't know).