title: asp.net viewstate encryption
body: <p>I have a few questions about when and how viewstate is encrypted in asp.net 3.5.
  For instance, if I have a machinekey entry in my web.config like:
   
              decryptionKey="AutoGenerate,IsolateApps" 
              validation="AES" 
              decryption="Auto" /></p>
  
  <p>Is viewstate encrypted at this point? Or do I need to specify the viewStateEncryptionMode in the page section also?</p>
  
  <p>Also, is it possible to encrypt a formsauthentication cookie, but not encrypt viewstate at the same time?</p>
  
  <p>Thanks for any help.</p>