Securing the Forms Authentication Cookie when offloading SSL

Question

I am attempting to secure a website I am currently developing using ASP.NET MVC 2.0 and forms authentication. In order to secure the forms authentication cookie I want to set th

Answer 1

SSL offload should allow you to make a SSL connection from the SSL offloader to the web server.

The SSL connection from the SSL Offloader to the web server should use the lightest and fastest (and probably weakest) encryption available.

This allows you to use secure cookies, reduce the encryption load on the servers and avoid the modification of your code.