Securing Microservices: mTLS in Kubernetes

In a Zero Trust network, we assume the network is hostile. This means Pod-to-Pod communication inside Kubernetes must be encrypted. Implicit vs Explicit mTLS Managing certificates manually is impossible. We use a Service Mesh (Linkerd or Istio). The application code (Service A) knows nothing about encryption. It talks to `localhost`. The proxy intercepts and upgrades […]

Read more โ†’
Posted in UncategorizedTagged

.NET 6 RC1: Final Features

RC1 is “Go Live”. The API is stable. Key highlights: HTTP/3 Support: Enabled by default in Kestrel. Profile Guided Optimization (PGO): Dynamic PGO is now available, delivering 10-20% throughput gains. DateOnly / TimeOnly: Finally, structs that map to SQL `DATE` and `TIME` without the timezone baggage of `DateTime`.

Read more โ†’
Posted in Uncategorized

Azure AD B2C: Custom Policies

User Flows are easy but limited. Custom Policies (Identity Experience Framework) are XML-based beasts that unlock full control. REST API Integration We use a Custom Policy to call a REST API during sign-up to validate a loyalty number. This runs before the user accounts is created in the directory.

Read more โ†’
Posted in Uncategorized