security
ASP.NET Core and .NET Security Articles, Tutorials & News
ASP.NET Core and .NET Security articles, tutorials, and news from the DotNetNews archive.
483 articles Updated Page 3 of 20
Browse additional ASP.NET Core and .NET Security articles from the DotNetNews archive.
ASP.NET Core and .NET Security articles
Page 3 of 20
Newest first
-
Understanding the Fetch Metadata HTTP headers: Sec-Fetch-Site and friends
andrewlock.net Issue #510
In this post I describe the Fetch Metadata HTTP headers like Sec-Fetch-Site and Sec-Fetch-Mode which give information to a server about the context of a request
-
MCP Security Best Practices: Authentication, Authorization, and Secure Tooling
c-sharpcorner.com Issue #509
Secure your .NET MCP implementations with best practices for authentication, authorization, and tool design to protect AI integrations and enterprise data.
-
Securing ASP.NET Core APIs with Microsoft Entra ID Authentication
c-sharpcorner.com Issue #508
Secure ASP.NET Core APIs with Microsoft Entra ID. Learn authentication, configuration, and best practices for robust API security.
-
GitHub Copilot Enterprise Best Practices for .NET Teams
c-sharpcorner.com Issue #508
Unlock GitHub Copilot Enterprise for .NET teams! Master best practices for AI-assisted coding, ensuring quality, security, and maintainability.
-
Rate Limiting in ASP.NET Core APIs: Best Practices for Scalable and Secure Applications
c-sharpcorner.com Issue #507
Master ASP.NET Core rate limiting for scalable, secure APIs. Learn best practices, algorithms (fixed, sliding, token bucket), and middleware for robust traffic control.
-
Secure Secrets Management in .NET with Azure Key Vault
c-sharpcorner.com Issue #507
Secure your .NET apps with Azure Key Vault. Learn to manage secrets, keys, and certs centrally, avoiding hardcoding and enhancing security.
-
Secure AI Applications in ASP.NET Core: Preventing Prompt Injection and Data Leakage
c-sharpcorner.com Issue #506
Secure ASP.NET Core AI apps against prompt injection & data leakage. Learn best practices for LLM security, RAG, and tool access.
-
Migrate Legacy ASP.NET Apps to .NET 10
c-sharpcorner.com Issue #506
Migrate legacy ASP.NET apps to .NET 10 for improved performance, security, and modern features. Learn the process and best practices.
-
Implementing Rate Limiting in ASP.NET Core for Secure and Scalable APIs
c-sharpcorner.com Issue #506
Secure your ASP.NET Core APIs with rate limiting. Learn to implement fixed window, sliding window, and token bucket strategies for robust protection.
-
Building Secure REST APIs with ASP.NET Core and API Versioning Best Practices
c-sharpcorner.com Issue #505
Build secure, versioned REST APIs in ASP.NET Core. Learn JWT auth, HTTPS, validation, and versioning best practices for reliable apps.
-
Password hashing done right: PBKDF2-SHA512, 600k iterations, timing-safe
medium.com Issue #504
Storing a password is a solved problem, and almost every breach headline is someone who solved it the wrong way. Here are the four…
-
Cross-service auth without a shared secret: JWKS dual-fetch
medium.com Issue #502
When you split a monolith into services, the easy answer is to copy the JWT signing secret into every validator. That is also the answer…
-
Implementing Passkey Authentication in ASP.NET Core Applications
c-sharpcorner.com Issue #502
Implement secure, passwordless passkey authentication in ASP.NET Core. Leverage FIDO2 & WebAuthn for enhanced security and user experience.
-
How to Build an AI Coding Assistant with ASP.NET Core and Local LLMs
c-sharpcorner.com Issue #501
Build an AI coding assistant with ASP.NET Core and local LLMs for enhanced privacy, security, and cost control in your development workflow.
-
Why Modern ASP.NET Core Web APIs Use JWT Instead of Sessions
ajax-workspace.medium.com Issue #500
Modern applications are no longer limited to a single website. A business may have an Angular application, a mobile app, an admin…
-
From Pentest to 1.7 Million Downloads, Part 2: The Lessons Nobody Taught Me
dotnetcore.show Issue #499
Strategic Technology Consultation Services This episode of The Modern .NET Show is supported, in part, by RJJ Software's Strategic Technology Consultation Services . If you're an SME (Small to Medium ...
-
The Verification Layer Every AI Agent Needs (and How I Built One Twice)
topuzas.medium.com Issue #499
Introduction: The Day I Stopped Trusting My Own Agent
-
How to Secure APIs with OAuth 2.1 and OpenID Connect
c-sharpcorner.com Issue #498
Secure your APIs with OAuth 2.1 and OpenID Connect. Learn about authentication, authorization, JWTs, PKCE, and best practices for modern applications.
-
OWASP Top 10 for .NET Developers - Part 8: Preventing Software and Data Integrity Failures
medium.com Issue #497
You reviewed your payment API code. Your unit tests passed, your vulnerability scans are clean, and your API gateway security policies are…
-
Why and When We Need to Use [CustomAuthorize] in ASP.NET
masumkazi.medium.com Issue #497
Authorization is one of the most critical aspects of web application security. Building a feature is important, but ensuring that only the…
-
Why I Added an Audit Trail to Our Admin Panel (and the Gap I Almost Missed)
medium.com Issue #494
Our internal admin panel is the control room for a B2B SaaS product. Staff use it to manage subscriptions, feature flags, and user access…
-
OWASP Top 10 for .NET Developers - Part 6: Preventing Vulnerable and Outdated Components
medium.com Issue #492
Modern software development is no longer just about writing secure code. It’s about trusting code written by others. Every NuGet package…
-
Reconfigurable Authorization Policies in .NET
medium.com Issue #492
Should changing an authorization rule really require a deployment?
-
JWT Done Right: 15 Production Mistakes Every ASP.NET Core Developer Should Avoid (.NET 9 Guide)
medium.com Issue #492
Fifteen JWT mistakes in ASP.NET Core APIs: validation, refresh tokens, key rotation, revocation, and the controls that must sit beside a…
-
How to Implement Passkey Authentication in ASP.NET Core Applications
c-sharpcorner.com Issue #491
Implement secure passkey authentication in ASP.NET Core apps. Enhance security & user experience with WebAuthn & FIDO2.