A detailed guide to setting up HTTPS and self-signed certificates on your local development environment for ASP.NET Core on Windows, Mac OSX and Linux.

Published on August 07, 2017 in ASP.NET Core

If you haven’t upgraded your site to HTTPS yet, take note. By the time Chrome 62 is launched, Chrome will mark all HTTP sites with any input fields as insecure.

Published on July 24, 2017 in Security

Even though Visual Studio Code doesn't support solution files, you can still work with multiple projects. In this tutorial, I'll show you how I use Visual Studio Code to work with multiple projects.

Published on July 12, 2017 in Visual Studio Code

ASP.NET Core Configuration Best Practices For Keeping Secrets Out of Source Control.

Published on July 10, 2017 in ASP.NET Core

How to store app secrets in Azure Key Vault, and how to read Azure Key Vault secrets with ASP.NET Core.

Published on July 06, 2017 in ASP.NET Core

A detailed account of how a bug in the GitHub extension that ships with Visual Studio 2015 exposed my source code to a public GitHub repository. What followed was a series of events that enabled Bitcoin miners to scan my code and spend $6,500 on my Amazon Web Services account.

Published on September 01, 2015 in Security