Security in ASP.NET Core 2.1
Explore security enhancements in ASP.NET Core 2.1 through this comprehensive conference talk. Delve into topics such as Kestrel security, HTTPS by default, certificate configuration, SNI certification selection, and HSTS caveats. Learn about authentication options in ASP.NET Core template support, including individual user accounts and local database integration. Discover changes in ASP.NET Core 2.0 authentication, cookie middleware configuration, and API authentication. Gain insights into data protection, purpose strings, and key store implementation. Examine authorization goals, policies, requirements, and handlers, as well as resource-based authorization and identity features. Understand how these security improvements support both new and legacy scenarios in ASP.NET Core 2.1.