Notes from the team running your stack.
Tech insights, deep dives, and announcements for developers and ops teams on .NET, Windows Server, SQL Server, ASP.NET Core, and the wider web platform.
-
Mitigating CVE-2023-44487: HTTP/2 Rapid Reset on .NET Servers
CVE-2023-44487 enables devastating DDoS attacks by exploiting HTTP/2 stream resets. Learn exactly which .NET and Windows components are vulnerable, the precise configuration changes required, and code examples that add rate limiting to your ASP.NET Core applications for robust protection.
-
Automating Secure IIS Configurations on Windows Server with PowerShell
Manual IIS tweaks lead to inconsistent security postures across your hosting fleet. This article walks through battle-tested PowerShell scripts that enforce app pool isolation, strict TLS policies, request filtering, security headers, and Active Directory authentication on Windows Server 2022.
-
.NET 8: Runtime Improvements, C# 12, and ASP.NET Core Updates
Microsoft's .NET 8 release includes runtime performance gains, C# 12 language improvements like primary constructors, and ASP.NET Core updates for minimal APIs. This guide covers the most relevant changes for developers along with code examples and migration advice to help you upgrade your productio