Can I set a idle time limit on a website in IIS to logout a user? does
it have to be a SSL site?

thanks

[quoted text, click to view]


Technically, there is no such thing as "idle timeout" in HTTP for IIS
to implement because HTTP is stateless -- i.e. nothing to idle timeout
if there is no state. Thus, IIS doesn't have anything that looks like
"idle timeout".

However, application platforms on top of IIS, like ASP, ASP.Net, PHP,
etc as well as Authentication protocols such as Basic, NTLM, and
Kerberos, do have notions of state and hence timeout since they have
ways to maintaining state using HTTP. They are all configured
differently.

Thus, the answer to your question really depends on the application
you are talking about and how it is written.


//David
http://w3-4u.blogspot.com
http://blogs.msdn.com/David.Wang