Security in ASP.NET Core 2.0

Explore the latest security features and improvements in ASP.NET Core 2.0 through this comprehensive conference talk. Dive into the new authentication and authorization stack, learn about load balancing cryptographic keys, and discover how to build a flexible authorization system for securing web applications. Cover topics including hosting limits, authentication handlers, cookies, OpenID Connect, authorization policies, resource-based authorization, data protection, CSRF validation, and secrets management. Gain practical insights through demonstrations and examples of implementing these security enhancements in ASP.NET Core 2.0 projects.

Introduction
Overview
Hosting
Limits
Authentication
Template Off
Authentication Handlers
Cookies
Context Authentication
Identity Cookies
Sign in and sign out
Validator
Demo
Multiple handlers
OpenID Connect
Options
Authorization
Requirements
Policy
Demo of Policy
Ginger
Summary
Handler
Authorization Service
Resource Based Authorization
Custom Parameters
Data Protection
Configuration Points
Configuration Services
Certificate
Backing Store
Cookie Sharing
CSRF Validation
Secrets