Richard and Greg talk to Dominick Baier about what it takes to secure an ASP.NET 2.0 application. The conversation ranges across least-privlege programming, involving security at the design point and why SSL should be on by default!