ASP.NET Security Best Practices

I found Microsoft's Developer Highway Code to be a useful security checklist.

Microsoft has a lot to say about this subject:

• ASP.NET Web Application Security.
• Improving Web Application Security (an entire book dedicated to the subject)