Blogged: Experimental support for Device Bound Session Credentials (DBSC) in ASP.NET Core - Exploring the .NET 11 previews
andrewlock.net/exploring-the…
In this post I look at the new experimental support for DBSC coming in .NET 11
#dotnet#security#aspnetcore
Understanding Device Bound Session Credentials (DBSC)
andrewlock.net/understanding…
In this post I provide an introduction to Device Bound Session Credentials, I look at how DBSC protects against session hijacking, and how the protocol works.
#security#dotnet
Blogged: The pain of serializing unions and closed class hierarchies with System.Text.Json in .NET 11
andrewlock.net/exploring-the…
In this post I discuss the Json support for unions and closed hierarchies coming in .NET 11, the decisions made, and some of the sharp edges
#dotnet
Blogged: Finding the total number of processors on a machine with .NET
andrewlock.net/finding-the-t…
In this post I show how to find the total number of logical CPUs on a host (not just those available to a process); something that isn't exposed in modern .NET
#dotnet
3 days and @nuget still hasn't validated 4 of our packages, or responded to a customer support request...
Is there anyone left there? Should someone go check on them? Or is this the brave new AI future? 🤷♂️
Ever noticed headers like Sec-Fetch-Site and wondered what they're actually for? 👀
@andrewlocknet breaks down the Fetch Metadata headers, when browsers send them, & why devs should care. Have a look. 👇
prgress.co/4yTKOcl
ALT Screengrab: Understanding the Fetch Metadata HTTP headers: Sec-Fetch-Site and friends
I would really appreciate a retweet!
My current contract will be coming to an end in a month or two. I'm therefore starting to look around for my next opportunity, whether that's remote contract work or a permanent role.
I'm the author of Blazor-University.com, Fluxor, Roslynk, and some other things.
linkedin.com/in/peter-morris…github.com/mrpmorris/
Blogged: Automatic CSRF protection based on Fetch Metadata headers - Exploring the .NET 11 preview
andrewlock.net/exploring-the…
In this post I describe the new Cross-Site Request Forgery protection added to aspnetcore that relies on HTTP headers, not tokens
#aspnetcore#security
Blogged: Understanding the Fetch Metadata HTTP headers: Sec-Fetch-Site and friends
andrewlock.net/understanding…
In this post I describe the Fetch Metadata HTTP headers like Sec-Fetch-Site which semd info to a server about the context of a request
#Security#aspnetcore
Blogged: Improvements to reading Process outputs - Exploring the .NET 11 preview - Part 5
andrewlock.net/exploring-the…
In this post I show some of the improvements to the Process API in .NET 11 for running processes and reading their outputs without risk of deadlock
#dotnet