Encrypt MarketingAutomation tracking cookie to protect associated user data

Fixed in

EPiServer.ConnectForMarketingAutomation 5.0.1

(Or a related package)

Created

Jul 18, 2018

Updated

Aug 19, 2022

State

Closed, Acceptance tests pass

Description

We should encrypt the cookie value of the mai_trk cookie using MachineKey.Protect. Ideally, this would be backward compatible, allowing for migration of unencrypted cookies by attempting to deserialize the string directly if the unprotect fails.