MSDN Canada has created a new blog dedicated 100% to Security for Canadian Developers.  Hence the initials in the name of S4CD and the full address is http://blogs.msdn.com/S4CD 

This blog will consist of guest bloggers from some of the leading Security grur in the Canadian Security IT industry.

There are already a couple of good indepth articles on the IIS 6.0 and ASP.NET 2.0 Credentials Part One and Part Two.