Cookies under control: This is how your online meeting remains safe!

Cookies under control: This is how your online meeting remains safe!

Cham, Deutschland - On June 18, 2025, the district office announced that the closed administrative office will be temporarily closed. According to the notification, the necessary cookies that are required for the operation of the website are not in particular. These cookies, such as the ASP.NET_SessionID, ensure that the page works smoothly and are linked to user actions, for example when specifying data protection settings or when filling out forms. However, users have the option of changing their browser settings, but this can affect the functionality of certain areas of the website.

These cookies that do not store any personal data are essential for the operation of the website. For example, the COOKIE __Requestverification token can be found in the system, which is set as soon as a registration form is accessed. It remains active until the end of the browser session and contributes to ensuring safety when registering. Another important cookie is the LD cookieselection that stores the selection of the user's cookie settings.

Important information about session cookies

According to the best practices that are discussed in various technical blogs, the standard name of the session ID in ASP.NET, here ASP.NET_SessionID, should be changed as much as possible. The reason: A standard name allows conclusions to be drawn about the technology used - a feast for potential attackers. The length of the session ID is recommended to rely on at least 128 bits to ward off Brute Force attacks. In addition, the ID should be generated completely random to avoid predictability. Data such as passwords should never be saved in cookies, but rather be kept in secure locations on the server.

Another important topic is the use of HTTPS for all session -based applications, especially if sensitive data is processed. Safety aspects are clearly in the foreground here, and this also includes that the secure and httponly properties are activated for cookies. In order to avoid simultaneous sessions, the session should be deleted after a timeout, if you deregister or when the browser is closed. In addition, it would be ideal to put process data on the shortest possible time to minimize security risks.

Safe cookies in ASP.NET CORE

A new rule in software development, which is also known as CA5383, emphasizes the need to use safe cookies in ASP.NET CORE. This rule ensures that cookies are only transmitted via TLS encryption (HTTPS) to ensure that they cannot be easily listened to. This means that all applications that work with sensitive data should benefit from these security features.

For further details on the cookies and their administration, a look at the information from District Cham . Also the best practice on Tech Community Microsoft and the general regulations on Microsoft Docs offer valuable information.