Subject: Re: [Unbearable] TB APIs in (ASP).NET

From: =JeffH <[email-masked]>
Date: Fri, 19 Aug 2016 16:46:15 -0700

Andrei wrote on Wednesday, April 6, 2016...
 > At the meeting on Monday, there were a number of questions about
 > platform support for TB and the APIs available to implementers.
 >
 > Here are some links to (ASP).NET TB API documentation:
 >
 > ASP.Net:
 > 
<http://referencesource.microsoft.com/#System.Web/ITlsTokenBindingInfo.cs,4a5e5668f5c31170>
 >
 >  .NET code sample (see under “Networking enhancements”):
 > 
<https://blogs.msdn.microsoft.com/dotnet/2015/11/30/net-framework-4-6-1-is-now-available/>
 >  .NET TokenBinding class:
<https://msdn.microsoft.com/en-us/library/system.security.authentication.extendedprotection.tokenbinding(v=vs.110).aspx>
 >
 >  Native TB library API, for those who don’t believe in garbage
 > collectors:
 > 
<https://msdn.microsoft.com/en-us/library/windows/desktop/mt269464(v=vs.85).aspx>

thanks for sharing that, Andrei, it's useful.

This class is also helpful in understanding how one would use the 
TokenBinding class, as it exposes the GetTlsTokenBindings() method..

<https://msdn.microsoft.com/en-us/library/system.net.transportcontext(v=vs.110).aspx>

A direct link to the example code (from ".NET code sample" page, above) 
is here..

<https://gist.githubusercontent.com/preetikr/890f5c49b6d361ae0c58/raw/c2db5df04985c5a2151fd67eb40cb4623ac4c846/dotnet-461-tokenbinding.cs>

fwiw, the above appears to be an example of server-side code that is 
checking the Token Binding IDs, contained within security tokens, with 
the TB ID of the connection the security token is received over.

HTH,

=JeffH