IIS8+, EncryptOrDecrypt
-
lately since I did a code release for a Webforms project running on Server Core 2012 IIS, I've been getting a much larger number of these errors. Most of them come from bots and crawlers, but a majority are coming from lets say Android phones from Sprint. I did the machine key in the web config, really didn't make a difference. The errors are on embedded scripts and images in a DLL. I can see now that there coming from encypted pages, SSL pages. Hmm? I've been getting reports of users being kicked out when this error occurs on mobile phones.
Request information:
Request URL: https://website.com:443/webresource.axd?d=9p-kvnl9aixslh3pp9yv1ifbtokls\_noojxht-ldyzdjbiohul-pin6oo9ihnb6w6r6bacxojoxnxj2xeqmrwj8mbr\_enx1oiszooyedvtkx8jlqk8bo\_3was0q3tkvdvcyzdqn5tc9ncsnm\_67stg2&t=635789547909657452Exception information:
Exception type: HttpException
Exception message: Unable to validate data.
at System.Web.Configuration.MachineKeySection.EncryptOrDecryptData(Boolean fEncrypt, Byte[] buf, Byte[] modifier, Int32 start, Int32 length, Boolean useValidationSymAlgo, Boolean useLegacyMode, IVType ivType, Boolean signData)
at System.Web.UI.Page.DecryptString(String s, Purpose purpose)
at System.Web.Handlers.AssemblyResourceLoader.System.Web.IHttpHandler.ProcessRequest(HttpContext context)