Ambrose Little "]Thanks for the suggestion.  We'll explore it.

How's the exploration going.  I currently have to log in about five times a day.  This encourages me to read and delete the email notices I get when I might otherwise offer a reply.

Of course, that does serve to protect Helen E's position as the number 1 guru in the WebGrid forum. 

It's not that hard to login, is it??   I do it several times a day, too.

The thing is that we have this tied to SSO w/ your main Infragistics ID, so we have it setup to timeout with that.  The reason we don't want to extend your main ID timeout is because all of our keys, training, and profile info are associated with your ID, and there is a potential for a session replay attack there which we want to mitigate by having a shorter timeout.

That said, it does seem feasible that we could extend just the forums timeout without affecting the main site.  This might cause some odd behavior--where you're logged into forums but not into the main site, but there are worse things I suppose.  It is on our TODO list to consider and likely implement, but don't look for it any time in the immediate future.  Sorry!  You could alternatively use Windows Live Mail or something if the logging in really bothers you.

Ambrose Little "]

It's not that hard to login, is it??   I do it several times a day, too.

The thing is that we have this tied to SSO w/ your main Infragistics ID, so we have it setup to timeout with that.  The reason we don't want to extend your main ID timeout is because all of our keys, training, and profile info are associated with your ID, and there is a potential for a session replay attack there which we want to mitigate by having a shorter timeout.

That said, it does seem feasible that we could extend just the forums timeout without affecting the main site.  This might cause some odd behavior--where you're logged into forums but not into the main site, but there are worse things I suppose.  It is on our TODO list to consider and likely implement, but don't look for it any time in the immediate future.  Sorry!  You could alternatively use Windows Live Mail or something if the logging in really bothers you.

If your server and my internet connection were both as fast as we wish they were, I wouldn't squawk, but the two extra postbacks each add about 15 seconds to the process.  That's not enough to make me avoid logging in completely, but it is enough to make me think twice if I'm feeling hurried.  (And I have to admit, it's nowhere near as slow as the Micro$oft site.)

I wonder how many people would even notice that the timeout for your main site differs from that of your forums, especially if the time-out is based on a specified period of inactivity, as opposed to one based purely upon how long a person has been logged in.

I just logged in, and it took me about 1 second total.  I'm very concerned about the timeframe you mention.  You're not the first to mention it, but I've used these forums a lot here and at home w/ very little slowness, certainly not > a second or two.  We're going to continue to look into this perf issue.

Anyways, we will most likely up the forum timeout; it's just a matter of resource bandwidth on when we can get to it at this point.  Thanks again for the feedback.

Thank you very much.  Not having to log in more than once a day is a real blessing.

As you may or may not have noticed, we have increased the cookie timeout value to allow for much longer (currently set to 2 weeks with sliding expiration) login periods.  It is important to point out that the Forums authentication and main website authentication are tracked using two seperate cookies that will now expire at different times.  This change carries with it a few side-effects, particularly:

• The security of your main site login (access to your keys and private information) remains protected with a much lower timeout
• You can easily find yourself in a scenario in which you are logged into the forums, but not on the main site.  This should not cause any problems (outside the potential of being somewhat disorienting)

However, I think the convenience of staying logged-in for extended periods of time should far outweigh any of these side-effects.  And, of course, if you need to log out sooner just click the "Sign Out" link at the top of every page!

 Enjoy!

I'm told it should be sliding; let me know if you feel it isn't working that way.

Ambrose Little "]

I just logged in, and it took me about 1 second total.  I'm very concerned about the timeframe you mention.

It's quite possible that this difference entirely due a slow connection at my end.  I work for a government agency, and some darn fool might be trying to save your tax dollars by not buying me a faster connection.

Kidding aside, I would like to know how long the time-out is, and whether the clock gets reset when I post back.