Why should ViewState be encrypted when post data is not?
<p>Exactly that. I don't understand it quite.</p>

<p>ViewState encryption is provided in order to protect user-data privacy, but what is the point of setting ViewState to be encrypted if, e.g., using http (not https) posted form data is clearly visible for an interceptor from the http messsage body?</p>

<p>Thanks for clarifying.</p>
