Replacing Shared API Keys with mTLS in ASP.NET Core Without Baking Certificates into Containers
Secure an internal ASP.NET Core API with mutual TLS, Kestrel client-certificate requirements, application-level certificate validation, claim policies, and certificate-aware HttpClient configuration while keeping private keys outside container images.