What Happens When you Type Your Password into Windows?

There's a little known feature in Windows called the KDC Proxy that lets clients communicate with KDC servers over an HTTPS channel instead of TCP.

The Kerberos.NET library relies on a few cryptographic primitives for Kerberos. This post describes what those primitives are and how they're used.

Kerberos.NET is built to be used across multiple platforms, however there are some caveats.

The Kerberos.NET library has undergone significant redevelopment over the last year and has introduced many new features across both client and server.

Tl;dr; It’s really not. As we build new protocols we should remember all the things we got right with Kerberos and account for all the things we got wrong.

Token Binding is an incredibly important step in protecting your identity on the internet.

Credential Providers transfer user-supplied credentials to the security stack in Windows. They're COM-based, so you can build your own in .NET.

Protect your secrets managed by Enclave.NET in Azure Key Vault.

A quick and easy way to generate authority-signed certificates using just PowerShell.

Here's a foundation to build a module for processing your secrets outside your application.