opened
Eilon
username_0
Perhaps in the case of IIS (and thus Antares), ANCM should flow the IIS "app id" so that Data Protection could use it.

cc @username_1 @DamianEdwards @username_3 @username_2
Revisit how application identifier is generated
issue
created
blowdart
username_1
This is probably a hosting issue
comment
created
Tratcher
username_2
or ANCM + IISIntegration
comment
created
davidfowl
username_3
We need to also consider xplat and service fabric scenarios (clusters in general).

/cc @glennc
comment
created
johnkors
username_4
Are we talking about [DataProtectionUtilityExtensions](https://github.com/aspnet/DataProtection/blob/rel/1.0.3/src/Microsoft.AspNetCore.DataProtection/DataProtectionUtilityExtensions.cs#L42) ? 

It's by default causing invalidation of cookies when used in conjunction with Octopus, which deploys to a different physical path every deploy. 

@anderaus wrote a piece about the issues here: http://blog.novanet.no/a-pile-of-anti-forgery-cookies/
comment
created
davidfowl
username_3
Yes, it's a really bad default.
comment
closed
aspnet-hello
username_5
issue
created
aspnet-hello
username_5
This issue was moved to aspnet/Home#2512
comment