Remember the Principal of Least Privilege When Upgrading Those Older ASP.NET Applications

added by DotNetKicks
7/31/2019 4:29:21 PM


When I started developing with ASP.NET many years ago, we used two tools on a regular basis. We used Visual Studio to write code for applications, and Internet Information Services (IIS) to host the applications. IIS runs as a privileged service in Windows, meaning IIS has access to resources, APIs, and data structures on a machine that a normal user couldn't read or write.