mTLS - building machine to machine trust

What is mTLS? 

mTLS is also known as mutual TLS, after the ubiquitous security protocol. It is used in environments where machine-to-machine trust really matters.

Where in general is mTLS used? Where specifically is mTLS used? Did someone say "Kubernetes service mesh"? I think so! 

It's not generally used for public websites, but inside serious enterprise systems, it's a standard way to guarantee only authenticated services speak to each other.

Examples in modern infrastructure include: Kubernetes service meshes (Istio, Linkerd), API gateways, internal microservices, banking and trading and zero-trust networks.

Is mTLS a standard?

It's a section in TLS standard.

Unpacking "In-Process" HTTP Servers in ASP.NET Core

An ASP.NET Core application runs with an in-process HTTP server implementation which listens for HTTP requests and wraps up the request and makes it accessible to the program in an HttpContext. 

An in-process server sits within the same process as the application using it.

Note that this particular HttpContext differs from that in System.Web. 

The default in-process HTTP server is Kestrel (which is a cross-platform HTTP server implementation). 

For more advanced features use HTTP.sys. Note that HTTP.sys only runs on Windows. Note that IIS itself is built on HTTP.sys.

Among the additional features of HTTP.sys over Kestrel, are port sharing (so multiple listeners can listen on the same combination of port and IP address). 

Well-known port numbers include port 80 for HTTP and port 443 for HTTPS, the extension of HTTP using TLS for encryption (formerly SSL).