Expiration policies, automatic secret reloading with ReloadInterval, IOptionsSnapshot vs IOptionsMonitor, zero-downtime rotation strategy, and managing X.509 certificates with automatic renewal.
Citește mai mult
Why Key Vault and not just environment variables, creating a vault with RBAC, integration with IConfiguration through AddAzureKeyVault, and prefix filtering for Key Vaults per environment.
Citește mai mult
15 articles, a single common thread: how to build a secure ASP.NET Core system from scratch. A narrative retrospective that connects all the concepts — from Security by Design to Audit Logging — into a coherent arc.
Citește mai mult
How to implement audit logging and record security events in ASP.NET Core: what needs to be logged, the structure of an audit log, integration with Application Insights and Azure Monitor, automatic alerting, and GDPR compliance.
Citește mai mult
Built-in rate limiting in ASP.NET Core: Fixed Window, Sliding Window, Token Bucket, and Concurrency Limiter. Global and per-endpoint configuration, per-user policies, 429 responses, and integration with Azure API Management.
Citește mai mult
Blazor WebAssembly changes the security rules: your .NET code runs in the client's browser. Authentication with OIDC, protection of sensitive data, securing API calls, and what you can never hide in WASM.
Citește mai mult
The most common web vulnerabilities — CSRF, XSS, and Injection — clearly explained with examples of attacks and complete implementation of defense in ASP.NET Core. From antiforgery tokens to Content Security Policy and SQL parameterization.
Citește mai mult
How to sign XML documents in .NET using System.Security.Cryptography.Xml, X.509 certificates, and RSA keys. Signature validation, detached vs. enveloped signatures, and the e-Invoice context — why XML signing matters in Romania.
Citește mai mult
