ASP.NET Core has presented us with the opportunity to improve our security store, throw away or improve on of the mistakes of the past. ASP.NET now has a new authentication and authorization stack and different ways to load balance cryptographic keys. This session will demonstrate the new features and walk you through building a flexible authorization system to help you secure your web apps, as well as touching on other improvements we’ve made to make you more secure by default.