Security articles for .NET and Azure: managed identities instead of connection strings, certificates, container hardening, authentication flows and reducing attack surface.
Security is mostly the sum of small decisions: which runtime a container carries, how a service authenticates against Azure, where secrets live and which defaults a framework ships with. The guides in this collection document those decisions with working code.
Hands-on workshop on this topic: Digital Sovereignty Workshop
Distroless, Chiseled and Alpine are often compared as three equivalent Linux distributions. They are not. Alpine is a distribution built around musl, BusyBox and apk. Distroless describes a runtime image without a …
Read Blog Post
In the week of October 21, 2026, government portals in the Netherlands, Finland and Germany, hospital websites and several large companies took their public sites offline. Not because they had been breached, but because …
Read Blog Post
Applications that do not use ASP.NET Core Identity still need a disciplined password-storage design. This often leads to a requirement phrased as “password encryption.” That phrase is dangerous because encryption is …
Read Blog Post
This workshop gives engineering teams a solid, practical foundation in Microsoft Azure. Rather than covering every service superficially, it focuses on the fundamentals that matter most in real deployments: how …
Read Blog Post
Publishing NuGet packages has traditionally required one uncomfortable compromise: a long-lived API key had to exist somewhere in the delivery pipeline. Even when that secret was stored in a secure CI system, the model …
Read Blog Post
You can find the English version of this guide here: Self-Hosting Vaultwarden (Bitwarden) on Synology NAS with Docker Passwort-Manager-Dienste sind in den letzten Jahren deutlich teurer geworden. Gleichzeitig ist mein …
Read Blog Post
You can find the German version of this guide here: Vaultwarden auf Synology mit Docker selbst hosten Password manager services have become significantly more expensive in recent years. At the same time, my trust in …
Read Blog Post
Once you’ve established your own Root Certificate Authority, the next step is issuing server certificates for your local services. This guide walks through creating HTTPS certificates that are automatically trusted by …
Read Blog Post
When running multiple services in a local network-whether for smart home automation, home labs or development environments-HTTPS encryption becomes essential. Instead of accepting browser warnings for every self-signed …
Read Blog Post
Nowadays, you can’t actually run a website on the Internet without having a protection mechanism against content bots. One possibility is the use of CAPTCHAs. CAPTCHAs are small tasks that a human can easily solve, but a …
Read Blog Post