Microsoft is updating its NuGet author-signing certificate
If you enforce trusted signers or run dotnet nuget verify with Microsoft fingerprints, installs fail with NU3034 until you add the new certificate fingerprint.
Link library · Topic
Security
Authentication, tokens, supply chain and security updates. Every link was featured in The .NET Insider.
Experimental support for Device Bound Session Credentials (DBSC) in ASP.NET Core
.NET 11 adds experimental DBSC support to ASP.NET Core with one call, AddDeviceBoundSession(...). It ties a login session to a key in the device's TPM, so a stolen auth cookie stops working quickly.
What's Inside That Bearer Token? A Practical Guide to Encrypted JWTs (JWE) in .NET
A walkthrough of spotting, inspecting and decrypting encrypted JWTs with JsonWebTokenHandler. Decryption and validation are separate steps, and any token pasted into a chat or log should be treated as exposed.
.NET and .NET Framework September 2026 servicing releases updates
.NET and .NET Framework August 2026 servicing releases updates
Strengthening NuGet Supply Chain Security: Reducing API Key Lifetime
Use Aspire to implement and deploy the BFF security architecture
Links point to the original articles. Short descriptions are dotnetdevs.io commentary, not the authors' words.