http://www.digital-web.com/articles/web_design_contracts/

ISAPI_rewrite:

http://www.hanselman.com/blog/UsingISAPIRewriteToCanonicalizeASPNETURLsAndRemoveDefaultaspx.aspx

Google age ranking:

http://www.hanselman.com/blog/GooglePageRanksConsideredSubtle.aspx

Another interesting article:

http://www.joelonsoftware.com/articles/customerservice.html

Barry

One of the issues raised by Gleneagles during a penetration test was that the Cookies (session and authentication) did not have the SSL bit set.  This ensures that the cookie information cannot be transmitted through http://

To ensure this in the System.Web configuration section of the sites Web.Config:

1. Add <httpCookies requiresSSL="true" />

2. add the requiresSSL="true" attribute to the forms authentication configuration.

Cheers

http://googletesting.blogspot.com/

http://tredosoft.com/Multiple_IE