I was reading about CSRF attack and viewstate, if I got it correctly viewstate makes harder to get a succesfull CSRF attack but it can still happen if it\'s not encrypted, i