Tag

Security

11 posts tagged with this.

All posts RSS
  1. Official Blog
    · 4 min read

    Harden ASP.NET Core Auth Cookies on IIS

    Lock down cookie authentication for ASP.NET Core 10 on IIS: Secure, HttpOnly, SameSite, names, and lifetimes, with concrete CookieOptions.
  2. Official Blog
    · 3 min read

    Security Headers for ASP.NET Core 10 on IIS

    Missing response headers still open clickjacking and MIME sniffing paths on hosted ASP.NET sites. Wire HSTS, CSP, and cookie flags once.
  3. Official Blog
    · 4 min read

    Safe File Uploads for ASP.NET Core on IIS

    Stop treating uploads as trusted input. Validate type and size in ASP.NET Core, constrain IIS limits, and keep files outside the web root on Windows hosts.
  4. Official Blog
    · 4 min read

    Patch Discipline for .NET on IIS and SQL Server

    Unpatched runtimes beat fancy headers as a breach path. Build a repeatable patch cadence for the Hosting Bundle, IIS, and SQL Server on Windows hosts.
  5. Official Blog
    · 4 min read

    Harden Schannel TLS for IIS on Server 2025

    Legacy TLS protocols and weak ciphers still linger on IIS hosts. Tighten Schannel on Windows Server 2025 for modern, browser-safe connections.
  6. Official Blog
    · 5 min read

    Least Privilege for ASP.NET on IIS and SQL Server

    Shrink IIS app pool rights and SQL logins so a compromised ASP.NET site cannot roam the box. Concrete ACL, identity, and T-SQL patterns.
  7. Official Blog
    · 4 min read

    IIS Request Filtering That Stops Bad Traffic Early

    Block hostile URLs, verbs, and extensions at IIS before ASP.NET runs. Practical requestFiltering settings for Windows hosts and .NET apps.
  8. Official Blog
    · 4 min read

    Harden ASP.NET on IIS: Headers, Cookies, Secrets

    Most hosted ASP.NET breaches start with missing headers, weak cookies, and secrets in Web.config. Harden IIS and .NET 10 apps with concrete config.
  9. Billing & AccountKnowledge Base
    · 4 min read

    Why Am I Being Asked for Verification Documents?

    ASPnix requests verification documents on high-risk orders to prevent credit card fraud, confirm identity, and protect customers. This article details common triggers like address mismatches or elevated fraud scores, the submission process, what documents are needed, and how prompt responses lead to
  10. Hosted EmailKnowledge Base
    · 3 min read

    Is End-to-End Encryption Supported for Email?

    All ASPnix email services support STARTTLS and TLS/SSL for SMTP, IMAP, and POP3. Windows SmarterMail systems also secure ActiveSync, EWS, and MAPI for Outlook. Delivery is encrypted whenever both endpoints support it. This guide covers protocols, configuration steps, testing with CheckTLS, common pi
  11. Billing & AccountKnowledge Base
    · 3 min read

    How Is My Credit or Debit Card Information Stored and Is It Safe?

    We store card details encrypted with 256-bit AES in a secure, isolated database for automated billing and renewals. CVV is never stored. Access is limited to two employees with a 32-character passphrase, passwords rotate every 180 days, and our systems exceed PCI DSS with ongoing monitoring and upda