I'm interested in porting my .NET MVC app to .NET core mvc and using kestrel as my webserver.
I know that kestrel itself doesn't support Windows Authentication, can anyone suggest ideas on using IIS as an intermediary for WA?
For example, a user hits a page on the IIS server to check credentials -> page sends an AES encrypted key with specific user/domain info to my kestrel server page to verify identity. Maybe fetching this information through an ajax call would work too.
Does this example seem reasonable from a performance/security point?