Question : asp.net forms authentication w/ requireSSL="true" not working

I am trying to configure asp.net forms authentication for my web app with the following code in web.config:


                               protection="All"
                   requireSSL="true"
                   timeout="30"
                   name="MyApp1.Authenticate"
                   path="/"
                   slidingExpiration="true"
                   defaultUrl="/Default.aspx"
                   cookieless="UseCookies"
                   enableCrossAppRedirects="false" />


If requireSSL="false", everything works great.  However, if requireSSL="true", even though the URL is being executed over https, the following exception is thrown to the browser when logging in:  The application is configured to issue secure cookies. These cookies require the browser to issue the request over SSL (https protocol). However, the current request is not over SSL.

Any suggestions?

Answer : asp.net forms authentication w/ requireSSL="true" not working

Try to change the privacy settings in you browser.
If you are using Internet Explorer, it is under Tools --> Internet Options --> Privacy Tab --> Sites --> [Enter you site name] Always allow

In addition I would recommend fiddler - http://www.fiddlertool.com/fiddler/version.asp, it's a small add-on that will help you understand exactly what is happening