Anders Abel
where else to find them
bluesky:andersabel.bsky.social
what they talk about
all 5 in the filters
where they keep going back
- NDC Security5 editions2022–2026
- NDC Oslo4 editions2022–2025
all 5 in the filters
on a stage with
never shared a talk
who talks about the same things
- Dominick Baier31 talks
- Brock Allen11 talks
- Barry Dorrans8 talks
- Roland Guijt7 talks
- Philippe De Ryck39 talks
- Christian Wenz12 talks
| title | conference | date |
|---|---|---|
| ASP.NET Core meets OWASP Top 10 2025 | NDC Security 2026 | 2026-03-02 |
Compares OWASP Top 10 2025 item by item and shows which risks ASP.NET Core actually mitigates: data protection API handles IVs/keys and authenticated… | ||
| OpenID Connect Architectural Patterns | NDC Oslo 2025 | 2025-05-19 |
Demo shows implemented OpenID Connect flows using .NET 9 with pushed authorization requests, shows SSO working across two web apps and exposes the problem… | ||
| Tales of OAuth2/OIDC in the wild | NDC Security 2025 | 2025-01-20 |
Shows concrete failures and fixes: Microsoft ENT ID expands nested groups into ID tokens and limits group entries to about 200 to avoid header overflow, so ID… | ||
| ASP.NET Core Authentication and Authorization - the Key Concepts | CPH DevFest 2024 | 2024-08-26 |
Clear, practical mapping of ASP.NET Core authentication APIs: how AuthenticateAsync/ChallengeAsync/SignInAsync/SignOutAsync/ForbidAsync behave across cookie… | ||
| ASP.NET Core Authentication and Authorization - the Key Concepts | NDC Oslo 2024 | 2024-06-10 |
Distills how ASP.NET Core actually wires identity: the HTTP context user comes from the default authentication scheme, and the five core APIs… | ||
| OAUTH, OPENID CONNECT & .NET – THE GOOD PARTS | NDC London 2024 | 2024-01-29 |
Covers which OAuth2 pieces are actually useful today: use authorization code flow with PKCE for all interactive apps, use client credentials for… | ||
| The Future of Cookies | NDC London 2024 | 2024-01-29 |
Browsers are actively breaking third‑party cookies: Chrome made SameSite Lax the default in 2020 and is rolling out third‑party cookie blocking via the Privacy… | ||
| The Future of Cookies | NDC Security 2024 | 2024-01-09 |
Timeline of browser changes and concrete breakages: Chrome moves cookies to SameSite=Lax default (2020) then delays and progressively rolls out third‑party… | ||
| The Future of Cookies | NDC Oslo 2023 | 2023-05-22 |
Browsers change cookie behavior: Chrome moved default to SameSite=Lax (2020) then introduced a phased rollback and a Privacy Sandbox, Safari blocks third‑party… | ||
| OAuth – the good Parts | NDC Security 2023 | 2023-01-16 |
OAuth history condenses to concrete advice: prefer OAuth 2.0 (2.1 consolidates bad options), use only two flows in most cases — client_credentials for… | ||
| Securing SPAs and Blazor Applications using the BFF (Backend for Frontend) Pattern | NDC Oslo 2022 | 2022-09-26 |
Modern web development means that more and more application code is running in the browser. Traditionally this has been JavaScript but more recently there has… | ||
| Why We Should Kill Saml2 | NDC Security 2022 | 2022-04-06 |
Clear claim: SAML2 routinely fails the practical needs of web SSO — brittle metadata discovery, opaque redirect encoding, fragile XML signature semantics, and… | ||
| ASP.NET Core Meets Owasp Top 10 | NDC Security 2022 | 2022-04-06 |
ASP.NET Core defaults to safe patterns: middleware handles auth, static files run first unless reordered, and Identity uses PBKDF2 (HMAC‑SHA256, 10,000… | ||
| A guided tour of ASP.NET core security | Øredev 2016 | 2016-11-07 |
ASP.NET Core presents a new, extensible security model: a pluggable cookie middleware that extracts and restores identities, a policy-driven authorization… | ||
| nothing matches | ||