Async Benchmarks and Secure AI APIs
This edition covers .NET 10/11 async measurements, cache stampede control, JWT refresh tokens, tracing, webhook resilience, and OOB updates.
Jasen's top three picks
- 1 Runtime async benchmarks: .NET 10 vs .NET 11
Meziantou's blog
A useful data point, but the caveats matter as much as the benchmark tables when comparing release candidates.
- 2 Why 1,000 Cache Misses Should Trigger One Load
Medium
Cache stampedes are a familiar production failure mode; request coalescing is a worthwhile pattern to understand.
- 3 JWT Authentication in ASP.NET Core Web API (.NET 10): Identity, Refresh Tokens and a Locked MCP Endpoint
C# Corner
A broad authentication walkthrough spanning Identity, refresh tokens, PostgreSQL, and access control for an MCP endpoint.
Editor's note
I pulled together a deliberately varied mix of runtime work, application design, testing, and security. The async benchmark comparison is useful context for evaluating runtime claims, while the OOB security update notice deserves immediate operational attention. I also included practical guidance on protecting MCP tools and handling webhook outages.
Today's articles
Runtime async benchmarks: .NET 10 vs .NET 11
Meziantou's blog
The previous post showed what runtime async does to the generated IL. This one measures what it does to the numbers. Read the caveats at the bottom before quoting anything here. This is a release cand...
Topics: Benchmarking .NET 10 Performance
Read article
Why 1,000 Cache Misses Should Trigger One Load
Medium
Inside a .NET Cache — Part 1: coordinating concurrent requests before they become duplicate work.
Topics: Performance
Read article
JWT Authentication in ASP.NET Core Web API (.NET 10): Identity, Refresh Tokens and a Locked MCP Endpoint
C# Corner
Before you let AI near your API, you need to know who is asking. In this article we take an ASP.NET Core Web API (.NET 10, EF Core and PostgreSQL) that has no login at all and lock it down with ASP.NE...
Topics: ASP.NET Core Authentication JWT
Read article
Small .NET 10 Features Worth Using in Your Next Project
Medium
Less manual validation, simpler queries, and small C# tools without a project file.
Read article
OpenTelemetry in .NET: How to Trace Requests Across Microservices
C# Corner
Learn how to configure OpenTelemetry distributed tracing in ASP.NET Core, instrument HTTP requests, create custom spans, and propagate trace context across microservices.
Topics: ASP.NET Core OpenTelemetry
Read article
Stop Adding Layers Just Because It’s “Clean Architecture”
Medium
There is something that still annoys me in .NET projects.
Topics: Clean Architecture
Read article
How to Test AI Agents Against Prompt Injection Hidden in Tool Results
C# Corner
Learn how to test AI agents for indirect prompt injection in tool results, verify tool authorization and side effects, and build adversarial xUnit tests in C#.
Topics: Security Unit Testing xUnit.net
Read article
How to Test Webhook Delivery When the Receiver Is Temporarily Offline
C# Corner
Learn how to test ASP.NET Core webhook delivery during receiver outages, including retries, duplicate events, timeouts, idempotent processing, and recovery.
Topics: ASP.NET Core Unit Testing
Read article
.NET 10 MCP Server: 3 Methods AI Should Never Get
C# Corner
Build a read-only MCP server in .NET 10 and ASP.NET Core that lets Claude Code or GitHub Copilot query PostgreSQL without exposing update, delete, or arbitrary SQL tools.
Topics: ASP.NET Core .NET 10 PostgreSQL
Read article
.NET October 2026 Out-of-Band Security Updates
Microsoft Dev Blogs
Today, we are releasing out-of-band (OOB) security updates for .NET 8, .NET 9, and .NET 10, along with .NET 11 Release Candidate 3. We recommend updating as soon as possible. Security updates This out...
Topics: .NET 10 .NET 8 Security
Read article
REA (Reverse Engineer Anything): What It Is, How I Used It
codewithmukesh
What REA is, how it works, why it went viral, and how to set it up on Windows, plus the app I rebuilt with it in .NET 10 and why code is no longer the moat.
Read article
How to Measure Whether a Code Change Makes Your Application Slower
C# Corner
Learn how to detect application performance regressions with repeatable baselines, controlled workloads, latency percentiles, throughput measurements, and profiling tools.
Topics: Benchmarking Performance Profiling
Read article
C# Performance: 12 Hidden Allocations That Can Hurt Your Application
Dotnet on Medium
You don’t always see new and immediately think, "That's going to create allocation pressure." Allocations can come from LINQ, closures…Continue reading on Stackademic »
Topics: C# Performance
Read article
Building a Secure JWT Authentication & Refresh Token System with Clean Architecture in ASP.NET Core
C# Corner
Build JWT and refresh-token authentication in ASP.NET Core using Identity, token rotation, Clean Architecture, and a repository-based persistence layer.
Topics: Authentication Clean Architecture JWT
Read article