Encrypted view state

[Liz]

Can the view state be encrypted?

[Opera]

The view state can be encrypted by setting “EnableViewStateMac” to true and either modifying the <machineKey> element in Machine.config to <machineKey validation="3DES” /> or by adding the above statement to Web.config.

[sigs]

As per me, the view state need not be encrypted, as it should never contain sensitive information. If needed, however, the LosFormatter does provide limited encryption support. The LosFormatter only allows for a single type of encryption: Triple DES. To indicate that the view state should be encrypted, set the <machineKey> element's validation attribute in the machine.config file to 3DES.