Also, try this mailing list and their associated wiki http://www.css-discuss.org/mailman/listinfo/css-d

I managed to get an answer from another board. I need to create a CustomPrincipal from a GenericPrincipal which contains my user credentials and attach it to Thread.CurrentPrincipal in my authentication code. Ric

For a bit of a cheesy way, you could set display:none on your visited links and make sure the page expires imediatly so it must be reloaded when a user returns to it.

I can authenticate my users using WSE and passing a security token in, but once I've done that, how does the executing function access those user credentials so it can run with the correct DB privalages? Thanks Ric.

I'm hoping someone here can help me, I'm developing a webservice in c# for a legacy system with a fairly fixed architecture. The way its "security" works is that once an initial username/password pair is validated it returns a session ID (a sequential one) and all subsequent requests just require that ID. I've been looking at ws-security and ws-trust, I can manage a secure transaction on the initial login request but once that is done I'm unsure how to securely manage passing around this session ID, I was thinking of caching the "real" session ID in a hashtable on the server and returning a more secure ID to the client. Is this is good idea or are there better / more standard ways of doing this? Thanks Ric.

Make sure that body and div have margin: 0 and padding: 0 in your style sheet.