15 articles, a single common thread: how to build a secure ASP.NET Core system from scratch. A narrative retrospective that connects all the concepts — from Security by Design to Audit Logging — into a coherent arc.
Citește mai mult
How to implement audit logging and record security events in ASP.NET Core: what needs to be logged, the structure of an audit log, integration with Application Insights and Azure Monitor, automatic alerting, and GDPR compliance.
Citește mai mult
Built-in rate limiting in ASP.NET Core: Fixed Window, Sliding Window, Token Bucket, and Concurrency Limiter. Global and per-endpoint configuration, per-user policies, 429 responses, and integration with Azure API Management.
Citește mai mult
Blazor WebAssembly changes the security rules: your .NET code runs in the client's browser. Authentication with OIDC, protection of sensitive data, securing API calls, and what you can never hide in WASM.
Citește mai mult
The most common web vulnerabilities — CSRF, XSS, and Injection — clearly explained with examples of attacks and complete implementation of defense in ASP.NET Core. From antiforgery tokens to Content Security Policy and SQL parameterization.
Citește mai mult
How to sign XML documents in .NET using System.Security.Cryptography.Xml, X.509 certificates, and RSA keys. Signature validation, detached vs. enveloped signatures, and the e-Invoice context — why XML signing matters in Romania.
Citește mai mult
How to implement mutual TLS (mTLS) in ASP.NET Core: both parties authenticate using X.509 certificates. Kestrel configuration, reverse proxy (Nginx, Azure Application Gateway), certificate forwarding, and microservices scenarios.
Citește mai mult
How X.509 client certificate authentication works, how to create and configure certificates for development and production, and how to implement validation in ASP.NET Core — no passwords, no tokens.
Citește mai mult
