title: Using GUID in Querystring for security
body: <p>Within my ASP.Net MVC application I want to allow a particular user group access to a page where they can download a file. Normally I would request that this user group access the page with the download through a login (username and password) and authenticating their login credentials. However, this user group are complaining about the amount of login details they have for several other web systems and don't really want to have another set of login details to remember. Therefore, I was thinking of passing the user a URL that contains a GUID hoping that this would mean it very unlikely for anyone to guess. For example:</p>
  
  <p><a href="http://www.example.com/admin/93017B0C-D548-40CA-A7B0-D4DA707ABE4C" rel="nofollow">http://www.example.com/admin/93017B0C-D548-40CA-A7B0-D4DA707ABE4C</a></p>
  
  <p>I would really appreciate what people think of this approach? Would it still be deemed as secure? Or should I go with my normal approach of authenticating user login details and then redirecting them to the secure page with the download.</p>
  
  <p>Thanks in advance.</p>