Does anybody know about support of cookieless session in current and next versions of ASP.NET or ASP.NET MVC?
They say that cookieless session aren't recommended (that is clear why) and are deprecated. But I can't find any official confirmation, any like from Microsoft web sites, or ASP.NET blogs, roadmaps or anything official.
I am not sure where you heard about cookieless beind deprecated. If you can remember the article, please share.
Cookieless, as the name implies, is the last resort when the client does not allow cookies. It is used to authenticate the client. It is not secure and is not recommended for Internet Web Sites. I guess, It could be OK for secured networks (i.e. internal web sites). However, even there you should think about forcing cookies and use other security measures.
http://www.asp.net/aspnet/overview/web-development-best-practices/what-not-to-do-in-aspnet,-and-what-to-do-instead#cookieless