The NuGet Blog

The latest news, updates, and insights from the NuGet team

Security - The NuGet Blog

Changes to Expiring API Keys

August 25, 2016 Aug 25, 2016 08/25/16
Harikrishna Menon
In June, we published a blog post announcing Expiring API Keys. We received a lot of great feedback from the community about it. In retrospect, we did not do a great job explaining the motivation and reasoning for this security measure to the community. This post goes into more detail about why we introduced Expiring API Keys, the immediate ...

NuGet API key expiration

June 22, 2016 Jun 22, 2016 06/22/16
Maarten Balliauw
Update 6/22 (2:15 P.M PST): We have a lot of feedback coming in from the community on this topic. This change will not have any impact for another 90 days at the minimum. We are reviewing your feedback and will discuss further how to achieve our goal of improved security of NuGet.org. We will have an update within the next 45 days. To continue...

Package Signing

February 3, 2015 Feb 3, 2015 02/3/15
Karan Nandwani
Package signing has been a major discussion point for a long time in the NuGet ecosystem. However, the NuGet Team didn't want to rush into an implementation and end up creating something that restricted the ecosystem unnecessarily. Well, we now think we are ready to begin a process to introduce Package Signing, and we want to share our plans ...