Security Archives - Page 2 of 2

Hardening your IIS web server configuration with IIS Crypto

When setting up a web server it can be difficult to know what security measures need to be put in place. There are lots of things to think about such as which permissions to apply, which ports to open and which security protocols to enable. Luckily, if you are using IIS, there is a tool…

Obtaining and installing a Wildcard SSL Certificate – For software developers

InSecurity

As software developers, we know that SSL certificates are necessary for securing our website traffic. However, in my experience, the process of obtaining and installing an SSL certificate is not something that very many software developers are familiar with. So, if you are a software developer and are looking for some guidance on the process…

Working with User Account Control in .NET apps

InSecurity

Sometimes when you are developing a Windows app you’ll find the need to run the application as a different user, often as the administrator. Windows features a security mechanism called ‘User Account Control’ which prevents applications from launching with elevated privileges without the user’s consent. In this article, I explain how User Account Control works…

Stepping up the security of ASP.NET Core web apps with security headers

InSecurity Web

Now, more than ever before, employing security best practices from the start is an absolute must when developing modern web applications. The threat landscape has evolved continuously over the last number of years, however, so have the protection mechanisms which we as software developers can avail of to guard our applications against attackers. In this…

How to configure your ASP.NET Web Apps and APIs to require HTTPS

InSecurity

For any application which is hosted on the web, it is essential that security is built in from the start. Enabling your web application to serve secure traffic over HTTPS and enforcing this policy is one of the first things that you should implement and this is just as important for web apps as it…

Leveraging the DPAPI to encrypt sensitive configuration settings

InSecurity

It is very common that an application will need to store settings in a configuration file and then later retrieve the value of those settings. Quite often, one or more of these settings will be sensitive in nature; such as API keys, database connection strings, or perhaps mail server passwords. Protecting sensitive data is a…

How to not make a hash of your passwords with Scrypt.NET

InSecurity

I wasn’t aware until I began writing this article that the phrase “to make a hash of something” was in common use in the English-speaking world today. According to the Cambridge Dictionary, to make a hash of something can be interpreted as follows. hash noun (FAILURE) make a hash of sth [ S ] UK…

Category: Security

Hardening your IIS web server configuration with IIS Crypto

Obtaining and installing a Wildcard SSL Certificate – For software developers

Working with User Account Control in .NET apps

Stepping up the security of ASP.NET Core web apps with security headers

How to configure your ASP.NET Web Apps and APIs to require HTTPS

Leveraging the DPAPI to encrypt sensitive configuration settings

How to not make a hash of your passwords with Scrypt.NET

How to create and read encrypted zip files with C#

Validating and Sanitising filenames in a Blazor WebAssembly app

Auto-Registering and injecting multiple Handler Interfaces in ASP.NET Core