title: Session based authentication
body: <p>I am currently using session based authentication for my asp.net website.</p>
  
  <blockquote>
    <p>1) I would like to know whether it is safe or not to have session based
    authentication from security purpose.</p>
    
    <p>2) When number of users grows whether too many session slows down the
    performance?</p>
    
    <p>3) In case nothing will work out, I end up migrating session based
    authentication to Forms Authentication, What is safe way to migrate? </p>
  </blockquote>
  
  <p>so far i have referred this link</p>
  
  <blockquote>
    <p><a href="http://www.asp.net/general/videos/how-do-i-create-a-custom-membership-provider" rel="nofollow">http://www.asp.net/general/videos/how-do-i-create-a-custom-membership-provider</a></p>
  </blockquote>