MVC session state can i disable in IIS?

In 开发者_如何学运维IIS setting may I disable Session state without issue?

Only if you're not using it.

@zsharp, i don't believe mvc is doing anything with session no so there should be no reason why you can't simply turn it off.

The question i have is if you're not using it do you need to turn it off in the first place?

even if someone were to inject something into the session, if you're not using it then can it hurt?

I guess what i'm asking is there are particular reason why you want to switch it off?