Security Archives - Page 2 of 2

Obtaining and installing a Wildcard SSL Certificate – For software developers

As software developers, we know that SSL certificates are necessary for securing our website traffic. However, in my experience, the process of obtaining and installing an SSL certificate is not something that very many software developers are familiar with. So, if you are a software developer and are looking for some guidance on the process…

Working with User Account Control in .NET apps

InSecurity

Sometimes when you are developing a Windows app you’ll find the need to run the application as a different user, often as the administrator. Windows features a security mechanism called ‘User Account Control’ which prevents applications from launching with elevated privileges without the user’s consent. In this article, I explain how User Account Control works…

Stepping up the security of ASP.NET Core web apps with security headers

InSecurity Web

Now, more than ever before, employing security best practices from the start is an absolute must when developing modern web applications. The threat landscape has evolved continuously over the last number of years, however, so have the protection mechanisms which we as software developers can avail of to guard our applications against attackers. In this…

How to configure your ASP.NET Web Apps and APIs to require HTTPS

InSecurity

For any application which is hosted on the web, it is essential that security is built in from the start. Enabling your web application to serve secure traffic over HTTPS and enforcing this policy is one of the first things that you should implement and this is just as important for web apps as it…

Leveraging the DPAPI to encrypt sensitive configuration settings

InSecurity

It is very common that an application will need to store settings in a configuration file and then later retrieve the value of those settings. Quite often, one or more of these settings will be sensitive in nature; such as API keys, database connection strings, or perhaps mail server passwords. Protecting sensitive data is a…

How to not make a hash of your passwords with Scrypt.NET

InSecurity

I wasn’t aware until I began writing this article that the phrase “to make a hash of something” was in common use in the English-speaking world today. According to the Cambridge Dictionary, to make a hash of something can be interpreted as follows. hash noun (FAILURE) make a hash of sth [ S ] UK…

Category: Security

Obtaining and installing a Wildcard SSL Certificate – For software developers

Working with User Account Control in .NET apps

Stepping up the security of ASP.NET Core web apps with security headers

How to configure your ASP.NET Web Apps and APIs to require HTTPS

Leveraging the DPAPI to encrypt sensitive configuration settings

How to not make a hash of your passwords with Scrypt.NET

Exploring SQL Server JSON mapping support in Entity Framework Core 9

Working with JSON functions in SQL Server

Using AzCopy to transfer a large number of files between Azure Blob Storage Containers